Using Parameters in Apple iOS/macOS Profiles
Creating profiles with parameters in them is the ability to insert string/bool/int/datetime parameters into a profile so that they can be dynamically used on many devices.
The following will help you understand what fields can be used, and what information will come from them.
Remember: The below options are for FileWave's built in abilities. You can always create your own options by creating custom fields that are either mapped to LDAP attributes, custom scripts, or manually entered parameters. See Custom Fields for more information.
What are my Options
LDAP Parameters
FileWave version 6.1 allows you to use Directory based parameters in your profile payloads.
|
%first_name% %last_name% %full_name% %short_name% %email% %job_title% %mobile_phone% %guid% |
Setting up a directory server for use with Parameterized Profiles is easy. Navigate to the FileWave Preferences Screen and fill out the appropriate information for your OpenDirectory, Active Directory or E-Directory. For issues and troubleshooting related to your LDAP preferences, please refer to the LDAP section.
You must also be using LDAP authentication for iOS device enrollment. Instructions for that setup are in the Using LDAP to enroll macOS/iOS/Android devices.
For the above user strings to work you must be pointed to an Directory server and have it selected as authentication
You can also map custom fields to LDAP parameters to extend the above list.
See Custom Fields for more information.
Inventory / Device Parameters
Starting in FileWave 6.1+ you can reference specific information about the device as well, directly from FileWave Inventory. Those fields are:
|
%OSVersion% %SerialNumber% %ProductName% %BuildVersion% %WIFIMAC% %ICCID% %IMEI% |
All Devices
|
Common Device Parameters |
Type |
FileWave Version Introduced |
|
%archived% |
datetime |
13.0.0 |
|
%auth_username% |
string |
13.0.0 |
|
%cpu_count% |
int |
13.0.0 |
|
%cpu_type% |
string |
13.0.0 |
|
%current_ip_address% |
string |
13.0.0 |
|
%last_enterprise_app_validation_date% |
datetime |
13.0.0 |
|
%last_state_change_date% |
datetime |
13.0.0 |
|
%department% |
string |
13.0.0 |
|
%device_id% |
string |
13.0.0 |
|
%device_name% |
string |
13.0.0 |
|
%device_product_name% |
string |
13.0.0 |
|
%enroll_date% |
datetime |
13.0.0 |
|
%filewave_client_name% |
string |
13.0.0 |
|
%filewave_id% |
string |
13.0.0 |
|
%free_disk_space% |
int |
13.0.0 |
|
%is_system_integrity_protection_enabled% |
bool |
13.0.0 |
|
%is_tracking_enabled% |
bool |
13.0.0 |
|
%last_check_in% |
datetime |
13.0.0 |
|
%last_ldap_username% |
string |
13.0.0 |
|
%last_logged_in_username% |
string |
13.0.0 |
|
%location% |
string |
13.0.0 |
|
%management_mode% |
int |
13.0.0 |
|
%monitor_id% |
string |
13.0.0 |
|
%ram_size% |
int |
13.0.0 |
|
%serial_number% |
string |
13.0.0 |
|
%state% |
int |
13.0.0 |
|
%total_disk_space% |
int |
13.0.0 |
|
%unenrolled% |
bool |
13.0.0 |
|
%is_user_enrollment% |
bool |
13.2.0 |
|
%is_activation_lock_manageable% |
bool |
13.2.0 |
|
%remote_desktop_enabled% |
bool |
13.2.0 |
|
%external_boot_level% |
bool |
13.2.0 |
Desktop Specific (macOS & Windows)
|
Desktop Device Parameters |
Type |
|
|
%device_manufacturer% |
string |
13.0.0 |
|
%filewave_client_locked% |
bool |
13.0.0 |
|
%filewave_client_version% |
string |
13.0.0 |
|
%filewave_model_number% |
int |
13.0.0 |
|
%rom_bios_version% |
string |
13.0.0 |
iOS Specific
|
iOS Device Parameters |
Type |
|
|
%battery_level% |
float (from 0 to 1) |
13.0.0 |
|
%last_cloud_backup_date% |
datetime |
13.0.0 |
|
%last_wallpaper_change_date% |
datetime |
13.0.0 |
|
%apple_device_id% |
string |
13.0.0 |
|
%eas_device_identifier% |
string |
13.0.0 |
|
%is_activation_lock_enabled% |
bool |
13.0.0 |
|
%is_device_locator_service_enabled% |
bool |
13.0.0 |
|
%is_do_not_disturb_in_effect% |
bool |
13.0.0 |
|
%is_cloud_backup_enabled% |
bool |
13.0.0 |
|
%is_mdm_lost_mode_enabled% |
bool |
13.0.0 |
|
%is_supervised% |
bool |
13.0.0 |
|
%awaiting_configuration% |
bool |
13.0.0 |
|
%is_network_tethered% |
bool |
13.0.0 |
|
%itunes_store_account_is_active% |
bool |
13.0.0 |
|
%itunes_store_account_hash% |
string |
13.0.0 |
|
%languages% |
string |
13.0.0 |
|
%locales% |
string |
13.0.0 |
|
%maximum_resident_users% |
int |
13.0.0 |
|
%meid% |
string |
13.0.0 |
|
%model% |
string |
13.0.0 |
|
%organization_info% |
string |
13.0.0 |
|
%product% |
string |
13.0.0 |
|
%product_name% |
string |
13.0.0 |
You can also map custom fields to script results to extend the above list.
See Custom Fields for more information.
|
You can also look in the inventory query builder and it will tell you the internal name in the bottom left:
|
Using parameters in profiles
To add parameters to your profiles, simple replace the normal value with one from the list above.
For instance, you might create an email profile with the account information. See the example here:
Appendix
Directory servers use their own values for common fields. Below is the mapping for each supported directory:
E-Directory
|
Profile Parameters |
LDAP attribute name |
Remarks |
|
short_name |
uid |
|
|
first_name |
givenName |
|
|
last_name |
sn |
|
|
full_name |
fullName |
|
|
|
|
|
|
job_title |
title |
|
|
mobile_phone |
mobile |
|
|
guid |
GUID |
A binary read-only attribute |
Open Directory
|
Profile Parameters |
LDAP attribute name |
|
|
|
|
first_name |
givenName |
|
full_name |
fullName |
|
guid |
apple-generateduid |
|
job_title |
title |
|
last_name |
sn |
|
mobile_phone |
mobile |
|
short_name |
uid |
Active Directory
|
Profile Parameters |
LDAP attribute name |
|
|
|
|
first_name |
givenName |
|
full_name |
fullName |
|
guid |
objectGUID |
|
job_title |
title |
|
last_name |
sn |
|
mobile_phone |
mobile |
|
short_name |
sAMAccountName |
No Comments