Skip to main content

Getting this on most of our machines, becoming a real pain. Anyone got any ideas?

According to Jamf's release notes, this has been resolved in 10.9.

[PI-002379] Fixed an issue that caused MDM commands at the macOS user level to queue even after a user logs out of their computer.


So apparently this has been happening to us for a while, and it wasn't automatically resolved in 10.9. This issue has been carried forward all the way to 10.26.1 and our only recourse is to reënroll the Macs.

This query shows the number of commands sent to the computer_id in a 24 hour period. Do I win a prize?

select mdmc.device_id as pushtokenID, mdmc.command, cupt.computer_id, count() from mobile_device_management_commands mdmc left join computer_user_pushtokens cupt on mdmc.device_id=cupt.computer_user_pushtoken_id where mdmc.device_object_id=12 and mdmc.date_completed_epoch>unix_timestamp(date_sub(now(), interval 24 hour))1000 group by 1,2 order by 4 desc limit 1000;

pushtokenID command computer_id count(*)
1916    RemoveProfile   9206    32872
12700   RemoveProfile   10964   32790
4692    RemoveProfile   7656    31108
6837    RemoveProfile   12511   26745
7076    RemoveProfile   12594   17327
9249    RemoveProfile   13303   17045
14596   RemoveProfile   15427   17017
21032   RemoveProfile   18841   16513
14817   RemoveProfile   9809    15880
16514   RemoveProfile   16308   15775
514 RemoveProfile   5263    14712
1293    RemoveProfile   7534    14152
1319    RemoveProfile   7735    14079
14911   RemoveProfile   6126    13287
2723    RemoveProfile   10424   12763
4587    RemoveProfile   11619   12208
3749    RemoveProfile   6638    12207
16234   RemoveProfile   15802   12118
7135    RemoveProfile   12599   11740
16243   RemoveProfile   8789    11280
17188   RemoveProfile   16410   11156
15235   RemoveProfile   5095    11088
1410    RemoveProfile   7943    11082
6102    RemoveProfile   12120   10956
20863   RemoveProfile   18781   10671
318 RemoveProfile   5261    10531
13676   RemoveProfile   5046    10520
17171   RemoveProfile   5073    10211
1854    RemoveProfile   8978    10090
6455    RemoveProfile   5080    10006

So apparently this has been happening to us for a while, and it wasn't automatically resolved in 10.9. This issue has been carried forward all the way to 10.26.1 and our only recourse is to reënroll the Macs.

This query shows the number of commands sent to the computer_id in a 24 hour period. Do I win a prize?

select mdmc.device_id as pushtokenID, mdmc.command, cupt.computer_id, count() from mobile_device_management_commands mdmc left join computer_user_pushtokens cupt on mdmc.device_id=cupt.computer_user_pushtoken_id where mdmc.device_object_id=12 and mdmc.date_completed_epoch>unix_timestamp(date_sub(now(), interval 24 hour))1000 group by 1,2 order by 4 desc limit 1000;

pushtokenID command computer_id count(*)
1916    RemoveProfile   9206    32872
12700   RemoveProfile   10964   32790
4692    RemoveProfile   7656    31108
6837    RemoveProfile   12511   26745
7076    RemoveProfile   12594   17327
9249    RemoveProfile   13303   17045
14596   RemoveProfile   15427   17017
21032   RemoveProfile   18841   16513
14817   RemoveProfile   9809    15880
16514   RemoveProfile   16308   15775
514 RemoveProfile   5263    14712
1293    RemoveProfile   7534    14152
1319    RemoveProfile   7735    14079
14911   RemoveProfile   6126    13287
2723    RemoveProfile   10424   12763
4587    RemoveProfile   11619   12208
3749    RemoveProfile   6638    12207
16234   RemoveProfile   15802   12118
7135    RemoveProfile   12599   11740
16243   RemoveProfile   8789    11280
17188   RemoveProfile   16410   11156
15235   RemoveProfile   5095    11088
1410    RemoveProfile   7943    11082
6102    RemoveProfile   12120   10956
20863   RemoveProfile   18781   10671
318 RemoveProfile   5261    10531
13676   RemoveProfile   5046    10520
17171   RemoveProfile   5073    10211
1854    RemoveProfile   8978    10090
6455    RemoveProfile   5080    10006

I know Jamf advertises that the "Renew MDM Profile" command from the computer management dashboard is not supposed to fix anything, but in this case, it fixes this issue for me. This has been bugging me especially because it happens on newly pre-staged enrollment machines and is not a legacy issue per se.

I tried a few things first, so I do not know if this is a singular fix, but according to a sample of 1, it worked.

I'll update this if it is a singular fix on my next pre-staged enrollment.


Thanks this worked for me. I dont have an SQL server because its jamf cloud, but simply renewing the profile and cancelling the commands worked. had about 10 macs with this problem stuck since 2019

 

 

 


I have been told to never use "renew profile". I had not heard the justification. But, there it is!

This issue has bugged me for a long while. I am not sure if it still going on or if I just don't see it anymore. I am also on Jamfcloud.

Any comments on the danger of using that command?


worked for me.