Skip to main content

Using Parameters in Apple iOS/macOS Profiles

Creating profiles with parameters in them is the ability to insert string/bool/int/datetime parameters into a profile so that they can be dynamically used on many devices.

The following will help you understand what fields can be used, and what information will come from them.

Remember: The below options are for FileWave's built in abilities. You can always create your own options by creating custom fields that are either mapped to LDAP attributes, custom scripts, or manually entered parameters. See Custom Fields for more information.

What are my Options

LDAP Parameters

FileWave version 6.1 allows you to use Directory based parameters in your profile payloads.

%first_name%

%last_name%

%full_name%

%short_name%

%email%

%job_title%

%mobile_phone%

%guid%

Setting up a directory server for use with Parameterized Profiles is easy. Navigate to the FileWave Preferences Screen and fill out the appropriate information for your OpenDirectory, Active Directory or E-Directory. For issues and troubleshooting related to your LDAP preferences, please refer to the LDAP section.

You must also be using LDAP authentication for iOS device enrollment. Instructions for that setup are in the the Using LDAP to enroll macOS/iOS/Android devices.

For the above user strings to work you must be pointed to an Directory server and have it selected as authentication

You can also map custom fields to LDAP parameters to extend the above list.
See Custom Fields for more information.

Inventory / Device Parameters

Starting in FileWave 6.1+ you can reference specific information about the device as well, directly from FileWave Inventory. Those fields are:

%OSVersion%

%SerialNumber%

%ProductName%

%BuildVersion%

%WIFIMAC%

%ICCID%

%IMEI%

All Devices

Common Device Parameters

Type

FileWave Version Introduced

%archived%

datetime

13.0.0

%auth_username%

string

13.0.0

%cpu_count%

int

13.0.0

%cpu_type%

string

13.0.0

%current_ip_address%

string

13.0.0

%last_enterprise_app_validation_date%

datetime

13.0.0

%last_state_change_date%

datetime

13.0.0

%department%

string

13.0.0

%device_id%

string

13.0.0

%device_name%

string

13.0.0

%device_product_name%

string

13.0.0

%enroll_date%

datetime

13.0.0

%filewave_client_name%

string

13.0.0

%filewave_id%

string

13.0.0

%free_disk_space%

int

13.0.0

%is_system_integrity_protection_enabled%

bool

13.0.0

%is_tracking_enabled%

bool

13.0.0

%last_check_in%

datetime

13.0.0

%last_ldap_username%

string

13.0.0

%last_logged_in_username%

string

13.0.0

%location%

string

13.0.0

%management_mode%

int

13.0.0

%monitor_id%

string

13.0.0

%ram_size%

int

13.0.0

%serial_number%

string

13.0.0

%state%

int

13.0.0

%total_disk_space%

int

13.0.0

%unenrolled%

bool

13.0.0

%is_user_enrollment%

bool

13.2.0

%is_activation_lock_manageable%

bool

13.2.0

%remote_desktop_enabled%

bool

13.2.0

%external_boot_level%

bool

13.2.0

Desktop Specific (macOS & Windows)

Desktop Device Parameters

Type

  

%device_manufacturer%

string

13.0.0

%filewave_client_locked%

bool

13.0.0

%filewave_client_version%

string

13.0.0

%filewave_model_number%

int

13.0.0

%rom_bios_version%

string

13.0.0

iOS Specific

iOS Device Parameters

Type

  

%battery_level%

float (from 0 to 1)

13.0.0

%last_cloud_backup_date%

datetime

13.0.0

%last_wallpaper_change_date%

datetime

13.0.0

%apple_device_id%

string

13.0.0

%eas_device_identifier%

string

13.0.0

%is_activation_lock_enabled%

bool

13.0.0

%is_device_locator_service_enabled%

bool

13.0.0

%is_do_not_disturb_in_effect%

bool

13.0.0

%is_cloud_backup_enabled%

bool

13.0.0

%is_mdm_lost_mode_enabled%

bool

13.0.0

%is_supervised%

bool

13.0.0

%awaiting_configuration%

bool

13.0.0

%is_network_tethered%

bool

13.0.0

%itunes_store_account_is_active%

bool

13.0.0

%itunes_store_account_hash%

string

13.0.0

%languages%

string

13.0.0

%locales%

string

13.0.0

%maximum_resident_users%

int

13.0.0

%meid%

string

13.0.0

%model%

string

13.0.0

%organization_info%

string

13.0.0

%product%

string

13.0.0

%product_name%

string

13.0.0

You can also map custom fields to script results to extend the above list.
See Custom Fields for more information.

You can also look in the inventory query builder and it will tell you the internal name in the bottom left:

Using parameters in profiles

To add parameters to your profiles, simple replace the normal value with one from the list above.

For instance, you might create an email profile with the account information. See the example here:

Sample Profile

Appendix

Directory servers use their own values for common fields. Below is the mapping for each supported directory:

E-Directory

Profile Parameters

LDAP attribute name

Remarks

short_name

uid

  

first_name

givenName

  

last_name

sn

  

full_name

fullName

  

email

mail

  

job_title

title

  

mobile_phone

mobile

  

guid

GUID

A binary read-only attribute

Open Directory

Profile Parameters

LDAP attribute name

email

mail

first_name

givenName

full_name

fullName

guid

apple-generateduid

job_title

title

last_name

sn

mobile_phone

mobile

short_name

uid

Active Directory

Profile Parameters

LDAP attribute name

email

mail

first_name

givenName

full_name

fullName

guid

objectGUID

job_title

title

last_name

sn

mobile_phone

mobile

short_name

sAMAccountName