JAMF Nation, hosted by JAMF Software, is a dynamic and knowledgeable community of Apple-focused IT admins and Casper Suite users. Join us in person, in October, for the annual JAMF Nation User Conference (JNUC) to discover new and better ways to manage Apple devices.

102

MDM Capability No

Posted: 3/22/16 at 2:00 PM by billystanton

Hi Guys,

We have noticed an issue this PM which shows our MDM Capability as "No" after imaging or enrolling via the URL.

Does anybody know what I can check to see what might be causing this?

2 Machines have the same problem now.

Thanks!

EDIT 23/03/16 14:00PM GMT - It seems from comments below that this is an Apple issue, multiple users have reported this to Apple. JAMF have also had multiple reports.

EDIT 24/03/16 11:30AM GMT - Fixed.

102
CCA Badge CMA Badge

Posted: 3/22/16 at 2:06 PM by bwiessner

Same issue here - no matter what I do

As of yesterday computer I imaged with PreStage imaging it worked - -today all computers (3) I have imaged have come back as MDM Capability:NO
removedFrameWork and re-enrolled with quick add- removed MDM and re-pushed mdm - nothing works

Talked to support and they have others with the same issue - and are working will Apple to resolve.

CCA Badge CCE Badge CJA Badge Integrator Badge

Posted: 3/22/16 at 2:07 PM by davidacland

The usual culprits are:

  • Expired push cert
  • Expired or problematic tomcat cert
  • Blocked ports from the server to Apple, or the client devices to Apple
  • Issue with one of the MySQL tables (only had this once)
  • Something else

I haven't personally seen this caused from a client but there's always a first time.

Posted: 3/22/16 at 2:08 PM by golbiga

I'm seeing the same thing and so are others. If you go to your database and do the following,

use jamfsoftware;
select computer_name, computer_id, apn_token from computers;

You should see something like this

|computername        |         105 |                                                                         
|computername        |         106 |

It doesn't look like the JSS is receiving the apn token from the MacBook affected. Also if you run https://itunes.apple.com/us/app/push-diagnostics/id689859502?mt=12 on that machine it should fail. I haven't found a workaround yet, but there are issues with DEP today so I'm wondering if this is related.

Allen

Posted: 3/22/16 at 2:10 PM by crichards

We're currently experiencing this same issue with newly enrolled devices. We've done multiple re-enrollements and the typical troubleshooting. Reaching out to our TAM to see if it is an issue with Apple.

Posted: 3/22/16 at 2:12 PM by billystanton

ah, so this is a global issue rather than just us?

Posted: 3/22/16 at 2:23 PM by millersc

This looks like an Apple issue, but the status pages has not been updated to reflect an issue. http://www.apple.com/support/systemstatus/
https://developer.apple.com/system-status/

CCA Badge CMA Badge

Posted: 3/22/16 at 2:29 PM by bvrooman

At the risk of being a "me too" guy, I'm seeing this as well. I'm somewhat glad that it's just just our network, though; I was about to yell at someone for messing with firewall rules without talking to me first. :)

CCA Badge CMA Badge

Posted: 3/22/16 at 2:52 PM by bvrooman

Just talked to JAMF support. They've been seeing it all day and are working with Apple to get things restored. No ETR yet, but they believe it's an infrastructure issue.

CCT Badge

Posted: 3/22/16 at 3:27 PM by jacopo.pulici

I'm having the same issue.
Thanks @bvrooman for your feedback.

CCT Badge CCA Badge

Posted: 3/22/16 at 3:47 PM by ant89

Same issue here. New imaged via casper imaging and URL enrollment on a brand new machine did not work. Both laptops are not MDM capable. I called JAMF support, they have not yet gotten back to me. Just noticed this today. The mdm profile shows up in profile but doesnt do anything. Our configuration profiles dont work now.

CCA Badge CJA Badge

Posted: 3/22/16 at 3:52 PM by ryanstayloradobe

We started seeing this issue as well this afternoon. Thought it was our SSL cert. Glad it's not! We haven't touched anything on our JSS for months!

CCA Badge CMA Badge

Posted: 3/22/16 at 3:57 PM by msnowdon

Count me in. One of my techs noticed this same behavior today as well. Thought my network admin changed something in the firewall because he just started blocking IOS updates to 9.3.

CCT Badge

Posted: 3/22/16 at 3:58 PM by tim.c.arnold

Same issue here. I am not able to push any configuration profiles.

When I run the push diagnostics tool above - I get a cryptic error saying "The push network. Run tests to see more information." I re-run the tests, but I only get that same error message. Attaching screenshot:

CCT Badge CCA Badge

Posted: 3/22/16 at 4:01 PM by ant89

I hope they fix this asap. i need to encrypt some machines, now it does not give me the option to store the key in JSS.

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/22/16 at 6:22 PM by donmontalvo

Working here in SoCal...

CCA Badge CJA Badge

Posted: 3/22/16 at 11:46 PM by ryanstayloradobe

Maybe Apple fixed it. I'll check in the morning.

CCA Badge CCE Badge CJA Badge CMA Badge

Posted: 3/22/16 at 11:48 PM by jhbush1973

@ryanstayloradobe so far it still seems broken as recently imaged machines are not getting a APNS token.

CCA Badge CSE Badge CMA Badge

Posted: 3/23/16 at 12:38 AM by gskibum

Still not working for me. I noticed it about 6 hours ago.

CCA Badge CSE Badge CMA Badge

Posted: 3/23/16 at 12:43 AM by gskibum

Expired certs breaking Mac App Store apps, a security update that blacklisted Apple's own ethernet drivers, and now this.

Just sayin'.

Posted: 3/23/16 at 3:09 AM by billystanton

Anybody UK side tested this yet??

CCT Badge CCA Badge

Posted: 3/23/16 at 5:29 AM by andysemak

Not working here in UK.

Getting the same error in Push Diagnostics as @tim.c.arnold

CCT Badge CCA Badge

Posted: 3/23/16 at 5:38 AM by andysemak

Logged ticket with Apple and referenced this thread

Posted: 3/23/16 at 5:46 AM by billystanton

I've just tested and still down.

What does this mean? I have 5 machines to enrol that I can't enrol as the machines won't go out with the correct security settings etc.

Does anybody have a link I can use to also raise a case with apple?

CCA Badge CSE Badge CMA Badge

Posted: 3/23/16 at 6:10 AM by gskibum

@billystanton

I was able to enroll via URL. Then download the config profiles from the JSS, then copy them to the Mac for manual installation.

Posted: 3/23/16 at 6:11 AM by kcgarner

Seeing same issue here. New enrolled systems, MDM Capability No and can not get out using "Push Diagnostics". I can get out using "Push Diagnostics" on systems that were enrolled before yesterday

Posted: 3/23/16 at 6:17 AM by billystanton

@gskibum Apologies, How do you do that manually?

Cheers

Bill

Posted: 3/23/16 at 6:45 AM by skeb1ns

raises hand, not working here (located in the Netherlands)

CCA Badge CMA Badge

Posted: 3/23/16 at 6:52 AM by alexm

Not working for me either..
I am in London, JSS is in Boston.

Posted: 3/23/16 at 7:12 AM by ooshnoo

opened a ticket yesterday with Jamf about this. They said they had received multiple reports.

CCT Badge CCA Badge

Posted: 3/23/16 at 7:58 AM by CypherCookie

So "me too!" Just been confirmed by JAMF that multiple people are reporting this issue. Although no sign of Apple updating their system status.

Posted: 3/23/16 at 8:17 AM by ooshnoo

I've now opened a ticket with Apple enterprise support, and referenced this tread.

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 8:42 AM by TBathe

Still not working in NYC. I'm assuming once its resolved, we won't need to reimage the machines, and the config profiles will come down automatically?

CCA Badge CMA Badge

Posted: 3/23/16 at 8:51 AM by dgreening

I am seeing this on a few machines here in Boston (and around the globe in our other offices), but some of the machines imaged in the last day or so do have MDM compatibility set to "Yes" (wish we could report on that!!) and have their config profiles.

Posted: 3/23/16 at 9:02 AM by billystanton

As @gskibum mentioned above, I have been imaging and enrolling, then logging into the JSS on the users's laptop using my JSS account and then manually downloading config profiles and installing.

I would assume that MDM will switch to yes automatically, and if not, it would be a case of un-enrolling and then re-enrolling to get it all syncing again.

CCA Badge CMA Badge

Posted: 3/23/16 at 9:16 AM by msnowdon

@billystanton , How do you manually install config profiles? I'm drawing a blank.

Thanks

Mark

CCA Badge CMA Badge

Posted: 3/23/16 at 9:18 AM by msnowdon

@billystanton , Never mind. I just saw the download button on the profiles.

Posted: 3/23/16 at 9:19 AM by billystanton

@msnowdon I went onto the users machine that is freshly enrolled and then went to "jss.url" logged into my normal JSS account

  • Config profiles
  • Go into a Profile you wish to download
  • Download button at the bottom of the page

This downloads the .config file to the users machine, and can then be installed manually using admin credentials

This is how I am doing it so I can give machines out to new users with security settings applied, I will then re - enrol once these issues are resolved.

CCT Badge

Posted: 3/23/16 at 9:19 AM by tim.c.arnold

@billystanton and @msnowdon I would not recommend manually installing Config Profiles for your production computers. If it isn't installed by the MDM, then the MDM cannot manage it ( E.g. not removed, updated, or deleted).

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/23/16 at 9:19 AM by donmontalvo

@jhbush1973 wrote:

@ryanstayloradobe so far it still seems broken as recently imaged machines are not getting a APNS token.

My apologies, when I responded last night I meant the tool was reporting the issue was not effecting us.

I got an early call that this is indeed effecting our ability to enroll Macs.

Opening a ticket with Apple to get their acknowledgement and ETA for resolution.

Don

CCA Badge CMA Badge CUG Badge

Posted: 3/23/16 at 9:27 AM by stevewood

For those looking for a way to report on MDM status, while not ideal, you can report on the status via the API. Combine that into an EA script and you can create a Smart Group that gives you all machines that do not have MDM enabled.

#!/usr/bin/env python

import urllib
import subprocess
import os.path
import xml.etree.ElementTree as ET


jssAPIuser = 'apiuser'
jssAPIpass = 'apipass'
jssURL = 'https://' + jssAPIuser + ':' + jssAPIpass + \
    '@' + 'yourjssaddress'

serial = subprocess.Popen("system_profiler SPHardwareDataType |grep -v tray \
    | awk '/Serial/ {print $4}'", shell=True, stdout=subprocess.PIPE).\
    communicate()[0].strip()

url = jssURL + \
    '/JSSResource/computers/serialnumber/' + serial + '/subset/General'
uh = urllib.urlopen(url)
data = uh.read()
tree = ET.fromstring(data)
general = tree.findall('general')
mdm_status = general[0].find('mdm_capable').text

print '<result>' + str(mdm_status) + '</result>'

Hope that helps some.

CCA Badge CMA Badge CUG Badge

Posted: 3/23/16 at 9:31 AM by stevewood

I should point out, the script above provides the status of either True or False. You'd need to set your SG to False, obviously, for machines with MDM not enabled.

Also, you'll need to put in your API user name and password along with the URL to your JSS (just the domain and port like yourserver.com:8443).

Posted: 3/23/16 at 9:43 AM by billystanton

@tim.c.arnold You're correct, I should note that i've only set this up for 1 user so far to "get us by" without leaving the laptop unlocked.

I will remove profiles and re enrol once this is all resolved.

CCA Badge CMA Badge

Posted: 3/23/16 at 9:45 AM by msnowdon

Besides enrolling new machines and getting config profiles, what other services are affected? Seems like apps are not getting pushed down to mobile devices.

CCA Badge CMA Badge CUG Badge

Posted: 3/23/16 at 9:45 AM by stevewood

And I just heard from JAMF themselves that there is an EA Template already in the JSS for this. It's called "Verify MDM Enrollment". So, you can use the template or the Python script I posted.

Posted: 3/23/16 at 10:04 AM by itupshot

I noticed this problem yesterday afternoon when I imaged two MacBook Airs out of the box. They were supposed to receive some Config Profiles as part of enrollment, but no joy. JAMF confirmed that they'd been seeing "major outages with MDM communication."

I fired them up this morning, and they still haven't received them even though they've checked in with my JSS a couple of times already.

CCA Badge CSE Badge CMA Badge

Posted: 3/23/16 at 10:32 AM by gskibum

@tim.c.arnold Very good point!

CCA Badge CCE Badge CJA Badge CMA Badge

Posted: 3/23/16 at 10:53 AM by jhbush1973

@stevewood I would say your EA is better as it checks for MDM Capability which is a giveaway that things aren't working as expected. MDM Enrollment has come back as enrolled on machines that fail to acquire profiles.

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 10:57 AM by blackholemac

Hate to add a "me too" but me too...I'm seeing it sporadically though.

Our Apple SE definitely acknowledged a problem on Apple's end, but had little other info.

CCT Badge

Posted: 3/23/16 at 12:31 PM by Gordo_L

Same boat rowing right behind everybody...
Patiently stuck in the apple hold que but giving up for lunch!

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/23/16 at 12:35 PM by donmontalvo

Opened an escalation with Apple a few hours ago, haven't heard back. A few colleagues say they were told Apple is aware of the issue and is working on it. I'm hoping to get the same response so I can update our internal ticket.

Posted: 3/23/16 at 12:49 PM by oldemarg

Same here. Waiting to hear back from Apple.

CJA Badge

Posted: 3/23/16 at 1:24 PM by adhuston

Seeing much the same behavior here in Ohio. Configuration profiles are hung pending on our JSS.

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/23/16 at 1:30 PM by donmontalvo

Heard back from a colleague who got word back from Apple. Once they fix the MDM issue, clients should just start working again. Not sure why APNS is not included in System Status page. It is indeed listed on the Developer service status page, and shows the service is fine. :(

Fingers crossed.

CJA Badge

Posted: 3/23/16 at 1:35 PM by adhuston

Thanks Don! Hope we see a fix soon!

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/23/16 at 1:56 PM by donmontalvo

FYI, just got a response from our Apple SE...

Hi Don, Thank you for contacting AppleCare Enterprise Support. I understand you are unable to manage OS X systems via your MDM. Apple Product Engineering is aware of the issue and currently investigating. I do not have an ETA at this point, but I will follow-up once more information is available. Regards, XXXXXX XXXXXX AppleCare Enterprise Customer Support Engineering
CCT Badge CCA Badge CCE Badge

Posted: 3/23/16 at 2:31 PM by Aziz

@donmontalvo

Of course the system status for APNS would show as fine.

https://developer.apple.com/system-status/

Posted: 3/23/16 at 3:37 PM by mjohnston

Same issue here.
How does one run the MDM diagnostics?
Thanks,
Matt

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 3:41 PM by blackholemac

Push Diagnostics is a very helpful app on the App Store made by Two Canoes. That is what folks were using in the screenshots.

CCT Badge

Posted: 3/23/16 at 3:41 PM by zdale59

Called Apple to report this as well. Hoping they'll throw another engineer at it.

Posted: 3/23/16 at 3:46 PM by mjohnston

@blackholemac Thanks. Ran it on 2 new machines and it's failing.
Passes on older machines.
Apple need to fix this ASAP as we are about to start a massive refresh of the whole company.
:-(

Posted: 3/23/16 at 3:47 PM by bpavlov

Won't help you today, but if this FR were implemented it might not be a problem for OS X:
https://jamfnation.jamfsoftware.com/featureRequest.html?id=4619

Sorry for the shameless plug, but not really.

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 3:49 PM by blackholemac

Same boat man...happening sporadically...of course at the same time I'm trying to get a jump start on summer reimaging

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 3:51 PM by blackholemac

Already voted up

Posted: 3/23/16 at 4:04 PM by MichaelC

It's got my vote. Also, reporting the issue exists in New Zealand - although adding a 'me too' at this point seems redundant.

CCA Badge CCE Badge

Posted: 3/23/16 at 4:42 PM by dvasquez

When I called they did not acknowledge my information. But I am glad pings have been placed. I hope this is resolved soon.

I bet our Apple Support rep was looking at that APNS and was scratching his head.

Thanks Don!

Dom

CCA Badge CJA Badge

Posted: 3/23/16 at 5:47 PM by ryanstayloradobe

@donmontalvo that is the nearly identical response we got from our AppleCare support engineer. Still waiting for a fix. Fortunately, we have a manual workaround for our wifi profile and we're not using config profiles for anything else.

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 5:50 PM by blackholemac

I'm giving them until lunchtime Friday and then going to implement local profiles on the afflicted machines, tracking said machines in the JSS and 'fixing it' on those machines after APNS is fully operational.

CCA Badge CJA Badge

Posted: 3/23/16 at 5:51 PM by ryanstayloradobe

Since Apple's APNS status has been green since this outage occurred, is it only an issue between JAMF and Apple? Are other people having APNS issues outside of using Casper? I say that because FaceTime and iMessage are showing outages for some users after they update to 10.11.4.

CCA Badge CCE Badge CJA Badge

Posted: 3/23/16 at 5:55 PM by blackholemac

According to MacAdmins Slack, MobileIron (or Meraki...can't remember with all the messages flying) customers also seem to note the problem.

CCA Badge CSE Badge CMA Badge

Posted: 3/23/16 at 6:53 PM by gskibum

@ryanstayloradobe Every time I've ever encountered a confimed outage and have gone to check status, the status never reflects the outage. I don't even bother to look there anymore.

@everyone.

Both 10.11.3 and 10.11.4 give the same failures for me. The Configuration Profile logs say "Cancelled"

CCA Badge CCE Badge CMA Badge

Posted: 3/23/16 at 6:56 PM by osbalde

Tried again this afternoon, still down. Push Diagnostic reports green but enrolling a machine still results in no MDM capability.

Posted: 3/23/16 at 8:17 PM by prbsparx

We've seen this now in the U.S., Canada, Europe, and Asia. Doesn't seem to matter what version either.

Posted: 3/23/16 at 8:43 PM by smurphyusd346

I wonder if this is also somehow related:

"Many Mac users unable to log in to iMessage & FaceTime after updating to OS X 10.11.4"
http://9to5mac.com/2016/03/23/cant-log-in-to-imessage-facetime-os-x-10-11-4/

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/23/16 at 9:09 PM by donmontalvo

@ryanstayloradobe wrote:

Since Apple's APNS status has been green since this outage occurred, is it only an issue between JAMF and Apple? Are other people having APNS issues outside of using Casper? I say that because FaceTime and iMessage are showing outages for some users after they update to 10.11.4.

Interesting...Messages uses APNS, guessing FaceTime does too?

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/23/16 at 9:12 PM by donmontalvo

@blackholemac weotr:

I'm giving them until lunchtime Friday and then going to implement local profiles on the afflicted machines, tracking said machines in the JSS and 'fixing it' on those machines after APNS is fully operational.

We have been discussing this but yea, then you've got a bunch of deployed non MDM profiles to deal with. Hoping Apple fixes this soon.

CCT Badge CCA Badge CCE Badge CJA Badge CSE Badge CMA Badge

Posted: 3/23/16 at 10:59 PM by milesleacy

I'm seeing the same intermittent failures across my global enterprise. If you have enterprise AppleCare, submit a ticket.

CCT Badge

Posted: 3/24/16 at 3:07 AM by robertojok

I had the same problem with Casper imaging and failure of the MDM capability; logged a call with JAMF and have been informed I am not the only one in Europe with this problem. It started 2 days ago...

CCT Badge CCA Badge

SOLVED Posted: 3/24/16 at 4:11 AM by CypherCookie

Just check this morning and APN is back up and new Mac's are getting the config profile!

CCT Badge CCA Badge

Posted: 3/24/16 at 4:58 AM by justinjanson

DEP enrollment is up and running again and seems to work now.

Posted: 3/24/16 at 5:12 AM by skeb1ns

Can confirm that it works again! Profiles are delivered and Casper reports Yes to MDM capability.

CCT Badge

Posted: 3/24/16 at 5:13 AM by jacopo.pulici

Works for me too.

CCT Badge CCA Badge

Posted: 3/24/16 at 5:29 AM by andysemak

Think we are back up. I’ve just enrolled a device with DEP and also imaged another both enrolled and receiving profiles

CJA Badge

Posted: 3/24/16 at 5:57 AM by adhuston

Things are back to normal here as well. Hopefully it stays that way!

CUG Badge

Posted: 3/24/16 at 6:18 AM by adamcodega

Same here as well, actually resolved yesterday morning, so it was brief for us.

Posted: 3/24/16 at 7:00 AM by ooshnoo

working here as well now. Apple engineer managing our support case confirmed that engineering had resolved the issue.

Posted: 3/24/16 at 7:18 AM by kcgarner

now working here in MD

CCA Badge CMA Badge

Posted: 3/24/16 at 8:06 AM by msnowdon

Still not working for me. Did you guys need to do anything on your end? I cant enroll in DEP. My iPads are not receiving commands. They are all stuck in a pending state. I was able to enroll 1 newly imaged MacBook in the JSS while I cant enroll another.

Very strange

CCA Badge CCE Badge CJA Badge

Posted: 3/24/16 at 8:10 AM by blackholemac

I had to blow my problem ones out of the database, remove the framework and re-enroll, not ideal but it works.

CCT Badge

Posted: 3/24/16 at 8:14 AM by eddieluo

Works here in NYC for our computers but iPhone DEP is not. Anyone else experiencing issues with iPhone / iPad DEP?

CCA Badge CMA Badge

Posted: 3/24/16 at 8:17 AM by msnowdon

I cant enroll an iPad in DEP.

CCT Badge CCA Badge

Posted: 3/24/16 at 8:17 AM by CypherCookie

Not tried DEP, but when i tried this morning, machines which already had the initial MDM profile on which wasn't working started to work and automatically pulled down the profiles. I didn't need to do anything to get it working again. FYI I don't use DEP.

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/24/16 at 10:26 AM by donmontalvo

Just got confirmation from our Apple SE:

Hi Don, The issue is now resolved. I will go ahead and close the case at this point, but if you continue to experience issues simply reply to this email and the case will reopen. Regards, XXXXXX XXXXXX AppleCare Enterprise Customer Support Engineering
CCA Badge CMA Badge

Posted: 3/24/16 at 10:33 AM by bwiessner

MDM Capability: Yes - working on my end with enrolling machines.

Don't know about DEP devices or iPads.

CCT Badge

Posted: 3/24/16 at 10:52 AM by eddieluo

Thanks msnowdon... Can anyone else confirm that IOS DEP is not working? We are getting (NSURLErrorDomain error -1012.) and are stuck from moving forward. Tried un-scoping the iPhone from DEP but device refuse to recognize that it is un-scoped from DEP.

Posted: 3/24/16 at 11:21 AM by smurphyusd346

I just walked through DEP setup on an iPad 3 without issues.

CCT Badge

Posted: 3/24/16 at 11:37 AM by eddieluo

smurphyusd346, thanks for your response. Guess our DEP issue is not related to the MDM issue. Will work with JAMF support to solve this.

Posted: 3/24/16 at 11:58 AM by cgardner16

Still not working for us in PA.

Posted: 3/24/16 at 2:32 PM by CorpTech

Working now in MN.

CCA Badge CSE Badge CMA Badge

Posted: 3/24/16 at 4:10 PM by gskibum

For me Push Diagnostics is successfully making test pushes on some systems, but not on others.

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 3/24/16 at 7:08 PM by donmontalvo

FWIW we had a few systems that were not working, didn't do anything, once APNS was back up, they all started working again.

CCT Badge

Posted: 8/16/16 at 3:58 PM by rpendleton

One MacBook Pro. Completely re-imaged, fails all efforts to enable MDM. Multiple recons. Removed hard drive, swapped into alternate MacBook Pro, MDM successful. Original machine with error continues to refuse to install mdm with different hard drive.

Error as follows : Executing Policy MDM enable
Creating directory structure for /Library/Application Support/JAMF/Downloads/
Downloading http://jss.blahblahblah.noneya/CasperShare/Scripts/MdmUserLevel01.command...
Running script MdmUserLevel01.command...
Script exit code: 0
Script result: Getting management framework from the JSS...
Enabling MDM at the user level...
Error installing the user level mdm profile: profiles install for file:'/Library/Application Support/JAMF/CF926C2A-0670-4692-B4DF-E152ED13B630.mobileconfig' and user:'root' returned 1 (The operation couldn’t be completed. (InternalError error 1.))
Problem installing MDM profile.
Problem detecting MDM profile after installation.
Retrieving inventory preferences from https://jss.blahblahblah.noneya:8443/...
Finding extension attributes...
Locating applications...
Locating accounts...
Locating package receipts...
Locating hard drive information...
Searching path: /Applications
Locating software updates...
Locating plugins...
Searching path: /Library/Internet Plug-Ins
Locating printers...
Locating hardware information (Mac OS X 10.11.6)...
Gathering application usage information...
Searching path: /Users
Submitting data to https://jss.blahblahblah.noneya:8443/...
4392
The management framework will be enforced as soon as all policies are done executing.

We discovered all this after re-imaging, deleted the machine from our JSS and then attempted to recon it back. It does pull from our JSS and Self Service does work, but we can't manage the device. I will be contacting our rep tomorrow, to let him know.

CCA Badge CCE Badge CMA Badge CUG Badge

Posted: 8/16/16 at 8:41 PM by donmontalvo

FWIW, APNS is slow, from what we're hearing from Apple/JAMF, millions of kids returning to school this week, so commands queueing up and delayed. Tool several hours for a list of Configuration Profiles to install on a few test computers. Hope things speed up again by next week.

Could you give us some feedback on our Casper Suite releases?  This will be quick - we promise!