OSx and DEP Wi-Fi question

we run a similar setup. As part of the setup wizard, we connect to our wifi ssid manually (requires accepting the certs). Then have a config profile scoped to the dep wifi group that comes down during the setup enrollment process. The thing to remember is that jamf's current iteration of DEP doesn't have a wait for setup complete (see this feature request).

So our workaround is to wait for about 90 seconds on a setup wizard screen (ours is the time zone since we turn off the others) before clicking through to the end of the setup wizard. That allows the certificates and wifi profile to come down so you can login.

I'm in the same boat. I found that it won't work unless I make people hold tight at the Time Zone screen for a minute or so.

In fact I submitted a Feature Request like just last week. So go up vote this! https://www.jamf.com/jamf-nation/feature-requests/6263/configure-wifi-with-prestage-enrollment-for-computers

Same here. In our testing we are also seeing the need to wait for couple of minutes after manually connecting to WiFi. We are also seeing that if you configure certs in the pre-stage enrollment then the machine no longer connects to MDM server at setup assistant reliably. Working with support now to see if this is a bug or are we not using it properly. Will update......

@jwojda , do you just tell your end users to wait? Is there a way to force them to wait?

I haven't forced them to wait, just documentation.

We have a deployment group that does the initial setups for now, even they forget once in a while, until jamf integrates the

await_device_configured

key in its enrollment profile along with the

DeviceConfigured

command, that's going to be the best we can do.

I agree with everything said here.

I have spoken with Jamf about the wait but they don't seem interested in implementing it. I know other MDMs have it on both macOS and iOS.

By the way there's also this feature request that might overlap what I posted earlier and help and it's a lot more popular, soooo it might actually get done.

https://www.jamf.com/jamf-nation/feature-requests/5595/keep-mac-dep-device-in-setup-assistant-until-mdm-config-is-complete

So there is no way circumventing a manual setup unless you have an open Wi-Fi setup, dosen't feel like the zero touch which DEP promises.
Let's hope they never break imaging then, otherwise mac setup times will take much longer.

The whole point was that i wanted to have the users complete the enrollment and automatically bind the computers to their AD account in the MDM, and since i cant get the Wi-Fi certificate on the mac before the MDM enrollment process is done (or well the setup assistant ignores the profiles present in the background anyways) i'm stuck.

i should also note that my organisation won't pay for jamf however much i want it, so i have to find other ways. (currently intune on the horizon for all devices in the organization)