We have created a configuration profile to block/Defer macOS Sequoia but it is currently pending for 500 of our machines. I know some of these machines are still in use and checking in. Currently it has completed on 1700 machines. I am trying to figure out what could be stopping it from successfully completing on these last 500 machines as I know some of them are actively being used.
Question
Configuration profile to block macOS Sequoia pending
+3
+26The first thing I would check is the network those 500 devices are on, my guess some traffic that Apple requires for MDM is being blocked/filtered/redirected. You can get the Jamf Jet tool from the Jamf Marketplace or the MacEvaluation Tool from beta.apple.com, install it on one of the device and run the tool to see what ports and hosts Apple and Jamf recommended to be opened are blocked.
We are experiencing the same issue in our environment. About 20% of the devices this configuration profile is scoped to are still "pending." Of the 20% that are still pending, at least half of them have been online since the configuration profile was deployed. Not sure what's going on.
+8How does this profile look like?
We use the 90 day deferal option for Major Updates, it works fine so far.
We use Watchdog to troubleshot MDM distribution issues:
+8This is the time of year when Apple requires you to sign into Apple School Manager or Apple Business Manager and update the terms of service. Sometimes if you don't do this, you can have some issues with things that require the Apple push notification service, such as configuration profiles. Also check Jamf Pro to see if your MDM Push Notification Service certificate is not expired in Settings > Global > Push Certificates.
+3This is the time of year when Apple requires you to sign into Apple School Manager or Apple Business Manager and update the terms of service. Sometimes if you don't do this, you can have some issues with things that require the Apple push notification service, such as configuration profiles. Also check Jamf Pro to see if your MDM Push Notification Service certificate is not expired in Settings > Global > Push Certificates.
Checked and the MDM push certificate is up to date. Terms of service with Apple are up to date I believe we signed that last month.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.