Create Profile

Create your Profile with recommended settings.

Tech Lockdown Team

Follow these guidelines when creating a profile.

Create Config Files in iMazing

We will create config files using iMazing profile editor, then upload the config files to the associated Manage Engine Profile.

Note

It's recommended to create a profile and iMazing config for each type of restriction. For example, you would create a dedicated profile & iMazing config for enforcing DNS settings.

When creating profiles with iMazing, select the macOS filter at the top and use the search bar to quickly find settings.

Update Your Profile

Create a new profile in iMazing

Select a payload scope of System to apply the profile to all users on the Mac

If you are using iMazing on the managed Mac device, select Profile Signing: MDM-IDENTITY. Either way, select Prevent users from removing this profile.

Click file > Save

If you are using iMazing on the Mac that you are managing, it should give you the option to Sign profile with MDM-IDENTITY. Select this option if you have it. Otherwise, don't sign.

Upload Profile to ManageEngine

In Manage Engine, go to Device Mgmt > Profiles click the Create Profile dropdown and select macOS.

Add a title and description for your future reference and click continue

Go to the Custom Configuration section

Click Browse

Find the config file you saved using iMazing and click upload

Click save and the publish

Note

When you save and publish changes to a profile, your devices are not automatically updated with the changes. Every time you save a profile, a new version is created and must be distributed via "upgrading"

Right now, this profile isn't associated with a device. Before changes can be saved to your Mac, you'll need to associate it with the profile you just published.

Go to Device Mgmt > Groups & Devices, select the group you created for MacOS devices, click the Action dropdown, then select Associate Profile

Select the MacOS profile you created and click Associate

On your Mac device, open System Preferences > Profiles and you should see the profile

Remember, in order for changes to apply, you'll need to upgrade the profile after you publish it.

Syncing Profile Updates to Your Mac

When making changes to a profile, updates aren't automatically published to devices in your group. Here's how to update profiles so that devices are synced with the latest changes.

First, make sure that your profile has it's most recent changes saved and published:

Once the profile is saved/published and you are directed back to the screen that lists all of the profiles, open up the profile again and click the Upgrade All link under the Devices with older version section

Here is another method for upgrading a changed profile:

Navigate to Device Mgmt > Groups & Devices then select the group associated with your profile and click the Profiles tab.

Select the profile you updated and click Upgrade Profile

Your devices should sync with the profile changes.

Next Up

Now you can begin enforcing the full list of restrictions on your mac:

Configure Features on Your Mac

There are a host of different features that you can enable on your mac.