Skip to main content
Solved

Enrolled via DEP: No (?? - YES!)

  • Jul 17, 2018 5:41 PM UTC
  • 15 replies
  • 263 views
Forum|alt.badge.img+5

I am testing no-touch app installs and configuration with DEP Mac devices in JAMF.
I have a DEP Mac that I registered with JAMF and initially the device info did note that YES it was enrolled via DEP. After testing many settings I wiped the MAC and deleted the entry in JAMF so it can be configured as a new machine. However, thereafter, in the JAMF computer info, the info states that NO it was not enrolled via DEP. The thing is I have a smart group to add devices enrolled via DEP so now this workstation cant be added and the policies i have created that are tied to the smart group do not apply to this machine.
What is the trick to get JAMF to recognize that this mac was enrolled via DEP?
I also have one error come up: Command requires DEP enrollment: UserList <MDMClientError:74>
Thanks!

Best answer by chriscollins

I can't address why that is showing as no but my recommendation is to build your smart group around the criteria "Enrollment Method = PreStage enrollment: <name of prestage enrollment>" instead of using that Enrolled via DEP criteria. It will always be accurate. We set our smart group with that as the criteria and enrolled within the last day.

Also I just checked and I am pretty sure jamf gets that status of Enrolled via DEP from the profiles command.

sudo profiles status -type enrollment

I just checked and on a lot of machines that were enrolled via DEP its saying NO even though it was so the underlying profiles command might be giving back bad info.

View original

    15 replies

    Forum|alt.badge.img+16
    • chriscollins
    • Honored Contributor
    • Answer
    • Jul 17, 2018 5:49 PM UTC

    I can't address why that is showing as no but my recommendation is to build your smart group around the criteria "Enrollment Method = PreStage enrollment: <name of prestage enrollment>" instead of using that Enrolled via DEP criteria. It will always be accurate. We set our smart group with that as the criteria and enrolled within the last day.

    Also I just checked and I am pretty sure jamf gets that status of Enrolled via DEP from the profiles command.

    sudo profiles status -type enrollment

    I just checked and on a lot of machines that were enrolled via DEP its saying NO even though it was so the underlying profiles command might be giving back bad info.

      Forum|alt.badge.img+5
      • jsantiago
      • Author
      • New Contributor
      • Jul 17, 2018 6:00 PM UTC

      Thanks @chriscollins !
      That would solve my issue. Cheers

      Forum|alt.badge.img+5
      • jsantiago
      • Author
      • New Contributor
      • Jul 17, 2018 6:26 PM UTC

      I believe I found the solution to the "Enrolled via DEP: No" issue.
      In this case I was getting the following error: Command requires DEP enrollment: UserList <MDMClientError:74>
      So I triggered DEP on an already configuered mac by running the following:

      For lower than 10.13.4: sudo /usr/libexec/mdmclient dep nag

      For 10.13.4 and higher: sudo profiles renew -type enrollment

      This cleared all the profiles and re-registered it.
      Now JAMF see "Enrolled via DEP:" as YES.

      Still @chriscollins method is more reliable since it wont depend on this, which I just realized can break.

        Forum|alt.badge.img+14

        A similar issue has been bugging me all day while preparing computers for incoming students. Thanks @chriscollins and @jsantiago

        Forum|alt.badge.img+1
        • carrie
        • New Contributor
        • Oct 11, 2018 9:41 PM UTC

        sudo profiles renew -type enrollment
        sudo profiles status -type enrollment

        Enrolled via DEP: No

        still not working and ...

        Enrollment Method: User-initiated - no invitation
        I enrolled via the https://<jamfserver>/enroll

        Forum|alt.badge.img+5
        • amyh
        • Contributor
        • Jul 25, 2019 1:03 AM UTC

        @jsantiago that worked for me, thanks! Just a note, I had to approve the MDM profile again which was ok because the machine was on my testing bench, but it won't work for our 600+ remote computers...

        Forum|alt.badge.img+12
        • mhegge
        • Contributor
        • Dec 12, 2019 11:37 PM UTC

        Brand new Mojave iMacs (2, three more to go but am holding off...) - JAMF pro 10.12

        Same issue: UserList <MDMClientError:74>

        Enrolled via DEP: No

        Devices are enrolled, have received all of their Policies and Config Profiles

        All methods used above have had zero affect

        tjgriffin
        Forum|alt.badge.img+4
        • tjgriffin
        • Contributor
        • Dec 13, 2019 5:33 PM UTC

        I’m getting the same.
        I run the profiles command and see no change in the JSS.

        I’ve also removed the keychain.aspd file like some other discussions suggest.

        Any help would be great.

        Forum|alt.badge.img+12
        • mhegge
        • Contributor
        • Jan 3, 2020 3:44 PM UTC

        This is not resolved. Please update.

        Forum|alt.badge.img+4
        • arnokenis
        • Contributor
        • May 20, 2020 7:06 AM UTC

        I am starting to see this too, I have 60 computers with this issue and counting. Seeing it's been going on since 2018 I don't think this is ever solved?

        hung_cheng
        Forum|alt.badge.img+2
        • hung_cheng
        • New Contributor
        • Sep 7, 2020 8:27 AM UTC

        Same problem..

        I also tried the below commands and it still doesn't work when I run the sudo jamf recon.

        sudo profiles renew -type enrollment
        sudo profiles status -type enrollment

        Enrolled via DEP: No

        still not working and ...

        Enrollment Method: User-initiated - no invitation
        I enrolled via the https://<jamfserver>/enroll

        Any idea or update on this?

        Forum|alt.badge.img+19
        • hcodfrie
        • Valued Contributor
        • Sep 7, 2020 2:32 PM UTC

        Are you admin on that machine?

        hung_cheng
        Forum|alt.badge.img+2
        • hung_cheng
        • New Contributor
        • Sep 8, 2020 6:08 AM UTC

        Yes. I have the admin account under the laptop.

        Forum|alt.badge.img+1
        • Cyberbof
        • New Contributor
        • Apr 14, 2023 11:46 AM UTC

        Same error on Mac OS 10.14 or 13, please correct this. Server under Ubuntu 20.04

        Forum|alt.badge.img+11
        • dlevendo
        • Contributor
        • Apr 14, 2023 2:11 PM UTC

        In my experience with this issue, you need to be logged into the machine with an Admin account to run the "sudo profiles renew -type enrollment" command.  If you aren't logged in as Admin, the notification to update profiles doesn't show.

        Terms & ConditionsAccessibility statement