Over the last little while I’ve had several questions about whether you can use ZENworks to deploy MacOS profiles. While it’s true that at this time ZENworks doesn’t yet support the native MDM-based deployment method for applying management profiles, it is possible to distribute profiles in another fashion. This solution looks at how to use the built-in ‘profiles’ command in conjunction with the free ‘profilecreator’ tool and ZENworks to build profiles and then deploy them with ZENworks. Moving forward, we still intend to extend the MDM capabilities we’ve introduced for iOS to the MacOS platform, but it's going to take some time. As such, those who need a solution for profile management today, may find this solution useful.
If you have users such as the helpdesk where you want them to be able to override the profile, you can create a simple bundle that executes the ‘/usr/bin/profiles -D -f’ command which will remove all of the profiles. Just be sure to execute as root, and ensure that they either reapply the profiles before they leave or ensure that the profile bundle is set to automatically apply frequently.