Skip to main content
Solved

Machine not being scoped for a configuration profile that is for all machines?

  • September 23, 2016
  • 13 replies
  • 104 views

Forum|alt.badge.img+7

I have a config profile scoped to all machines but for some reason my test machine isn't picking up the profile. It's picking up policies that are scoped to all machines just not this.

I've tried reimaging the machine, removing it from the jss and re-enrolling, editing the config profile to force a distribute but for some reason this one machine keeps saying it's not within any config profile scopes and therefore it won't apply.

Anyone have any thoughts?

Best answer by cpdecker

Also I am not using sites so that could be introducing some volatility on your setup.

13 replies

Forum|alt.badge.img+18
  • Honored Contributor
  • September 23, 2016

Is this a computer level or a user level profile? If its a user level one, you may need to do a "jamf mdm -userlevelmdm".


Forum|alt.badge.img+7
  • Author
  • Contributor
  • September 23, 2016

@dgreening it's computer level


Forum|alt.badge.img+8
  • Valued Contributor
  • September 23, 2016

Under Computers > Specific Computer > Management > Configuration Profiles, are the intended configuration profiles listed there?


Forum|alt.badge.img+7
  • Author
  • Contributor
  • September 23, 2016

@cpdecker No it's saying 0 in scope under the option and "No configuration profiles" when selected.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • September 23, 2016

Just to add to things i've tried: i deleted the machine from the JSS and changed the computer name then re-enrolled, i deleted the mdm and re-enrolled that and i tried making a brand new blank config profile to push out and it this machine still says "0 in scope" despite it being set for all machines.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • September 24, 2016

@cpizanias Does the Mac show as "managed" & is the "MDM Capable" set to yes?


Forum|alt.badge.img+7
  • Author
  • Contributor
  • September 27, 2016

@bentoms Yes to both, and is giving an MDM identifier as well. Still no luck getting it to scope to the config.


Forum|alt.badge.img+8
  • Valued Contributor
  • September 29, 2016

This may not be very helpful but if it's not under Computers > Specific Computer > Management > Configuration Profiles I take that to be a scope issue. Are you absolutely sure you have it scoped correctly? No exclusions, no limitations?


Forum|alt.badge.img+7
  • Author
  • Contributor
  • September 29, 2016

@cpdecker I'm definitely willing to entertain the notion that I have it scoped wrong but if so I can't see how.

Album below of scope of profile and the machine not showing it. The machine is in the right site for the policy. I edited it just to hide the company name:

http://imgur.com/a/4O1k2


Forum|alt.badge.img+8
  • Valued Contributor
  • September 29, 2016

What if you set it to all computers, specific users and leave nothing defined for users? Grasping at straws but that is how I configure mine.


Forum|alt.badge.img+8
  • Valued Contributor
  • Answer
  • September 29, 2016

Also I am not using sites so that could be introducing some volatility on your setup.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • September 29, 2016

@cpdecker Yeah you're right, I set it to all sites and it worked. It's tricky for us because we have multiple offices but this config is pretty innocuous so I just flipped it to all. I'll have to play around but for now it's working. Thanks for your help.


Forum|alt.badge.img+8
  • Valued Contributor
  • September 29, 2016

Glad we got it figured out!