Getting this on most of our machines, becoming a real pain. Anyone got any ideas?
According to Jamf's release notes, this has been resolved in 10.9.
[PI-002379] Fixed an issue that caused MDM commands at the macOS user level to queue even after a user logs out of their computer.
So apparently this has been happening to us for a while, and it wasn't automatically resolved in 10.9. This issue has been carried forward all the way to 10.26.1 and our only recourse is to reënroll the Macs.
This query shows the number of commands sent to the computer_id in a 24 hour period. Do I win a prize?
select mdmc.device_id as pushtokenID, mdmc.command, cupt.computer_id, count() from mobile_device_management_commands mdmc left join computer_user_pushtokens cupt on mdmc.device_id=cupt.computer_user_pushtoken_id where mdmc.device_object_id=12 and mdmc.date_completed_epoch>unix_timestamp(date_sub(now(), interval 24 hour))1000 group by 1,2 order by 4 desc limit 1000;
pushtokenID command computer_id count(*)
1916 RemoveProfile 9206 32872
12700 RemoveProfile 10964 32790
4692 RemoveProfile 7656 31108
6837 RemoveProfile 12511 26745
7076 RemoveProfile 12594 17327
9249 RemoveProfile 13303 17045
14596 RemoveProfile 15427 17017
21032 RemoveProfile 18841 16513
14817 RemoveProfile 9809 15880
16514 RemoveProfile 16308 15775
514 RemoveProfile 5263 14712
1293 RemoveProfile 7534 14152
1319 RemoveProfile 7735 14079
14911 RemoveProfile 6126 13287
2723 RemoveProfile 10424 12763
4587 RemoveProfile 11619 12208
3749 RemoveProfile 6638 12207
16234 RemoveProfile 15802 12118
7135 RemoveProfile 12599 11740
16243 RemoveProfile 8789 11280
17188 RemoveProfile 16410 11156
15235 RemoveProfile 5095 11088
1410 RemoveProfile 7943 11082
6102 RemoveProfile 12120 10956
20863 RemoveProfile 18781 10671
318 RemoveProfile 5261 10531
13676 RemoveProfile 5046 10520
17171 RemoveProfile 5073 10211
1854 RemoveProfile 8978 10090
6455 RemoveProfile 5080 10006
So apparently this has been happening to us for a while, and it wasn't automatically resolved in 10.9. This issue has been carried forward all the way to 10.26.1 and our only recourse is to reënroll the Macs.
This query shows the number of commands sent to the computer_id in a 24 hour period. Do I win a prize?
select mdmc.device_id as pushtokenID, mdmc.command, cupt.computer_id, count() from mobile_device_management_commands mdmc left join computer_user_pushtokens cupt on mdmc.device_id=cupt.computer_user_pushtoken_id where mdmc.device_object_id=12 and mdmc.date_completed_epoch>unix_timestamp(date_sub(now(), interval 24 hour))1000 group by 1,2 order by 4 desc limit 1000;
pushtokenID command computer_id count(*)
1916 RemoveProfile 9206 32872
12700 RemoveProfile 10964 32790
4692 RemoveProfile 7656 31108
6837 RemoveProfile 12511 26745
7076 RemoveProfile 12594 17327
9249 RemoveProfile 13303 17045
14596 RemoveProfile 15427 17017
21032 RemoveProfile 18841 16513
14817 RemoveProfile 9809 15880
16514 RemoveProfile 16308 15775
514 RemoveProfile 5263 14712
1293 RemoveProfile 7534 14152
1319 RemoveProfile 7735 14079
14911 RemoveProfile 6126 13287
2723 RemoveProfile 10424 12763
4587 RemoveProfile 11619 12208
3749 RemoveProfile 6638 12207
16234 RemoveProfile 15802 12118
7135 RemoveProfile 12599 11740
16243 RemoveProfile 8789 11280
17188 RemoveProfile 16410 11156
15235 RemoveProfile 5095 11088
1410 RemoveProfile 7943 11082
6102 RemoveProfile 12120 10956
20863 RemoveProfile 18781 10671
318 RemoveProfile 5261 10531
13676 RemoveProfile 5046 10520
17171 RemoveProfile 5073 10211
1854 RemoveProfile 8978 10090
6455 RemoveProfile 5080 10006
I know Jamf advertises that the "Renew MDM Profile" command from the computer management dashboard is not supposed to fix anything, but in this case, it fixes this issue for me. This has been bugging me especially because it happens on newly pre-staged enrollment machines and is not a legacy issue per se.
I tried a few things first, so I do not know if this is a singular fix, but according to a sample of 1, it worked.
I'll update this if it is a singular fix on my next pre-staged enrollment.
Thanks this worked for me. I dont have an SQL server because its jamf cloud, but simply renewing the profile and cancelling the commands worked. had about 10 macs with this problem stuck since 2019
I have been told to never use "renew profile". I had not heard the justification. But, there it is!
This issue has bugged me for a long while. I am not sure if it still going on or if I just don't see it anymore. I am also on Jamfcloud.
Any comments on the danger of using that command?
worked for me.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.