Applies to: All version of Centrify Identity Service, Mac Edition
Why does User mobileconfig profile not install after user login to the machine, unless manually runs adgpupdate or wait for the GP update interval?
Centrify Engineering team has work with Apple Support and got the following response:
This issue behaves as intended based on the following:
There's no ability to install a user profile unless that user is actually logged into that user account.
The main reason is that the removal of a payload often needs to talk to processes that need to be available to the user.
During login, the initial GP update process is done by *su* to the user account and performing the installation, therefore it matches with the scenario above where the machine believe the user is not actually logged in yet and resulting the mobileconfig profile not able to install, while the machine mobileconfig profile will work fine.
Manually run adgpupdate at Terminal as the affected user to install the mobielconfig profile
Wait for the next Group Policy update interval in the background
NOTE: Group Policy will be updated in the background every 90 minutes, with a random offset of 0 to 30 minutes
Centrify Engineering team is aware of this issue and working on a solution in future releases.