I'm trying to build a "task sequence" through imaging that mirrors what we do on the Windows side. Ultimately what I would like is to have it 100% (or 99%) ready to go after the reboot from Imaging (still looking at FileVault options). So I have some configuration profiles setup now, and there's one that is hanging up on me until an inventory runs. That policy is for the network configurations (WiFi, wired, VPN), and pulls an AD cert at the same time.
I don't want the config to be pushed to the machine until I know it's on the domain, so right now I have 2 smart groups. 1 is for machines with a certain file I put on the machine to indicate it's going through this process, but NOT bound to AD. The 2nd is for machines that have the file and ARE bound to AD.
Looking through the jamf.log file and refreshing the machine in JSS while it's booting, it looks like it binds to AD while it still has the Apple logo and the progress bar (which is after the inventory request from Imaging). So it's stuck in this limbo land where it just updated the inventory but JSS doesn't know that it's bound yet.
I've built a policy strictly that updates the inventory for the non-bound computer group. I set that for start-up, login, logout etc but it doesn't actually run until the logout from my first login (the login isn't triggered). Below is the log for a machine I've tried this on. You see it update the inventory, THEN bind to AD, then it tells JSS I'm logging in, but doesn't get the login hook but does then get the logout hook and the login hook for the next login.
Tue Aug 25 11:15:43 MyMac jamf[589]: Executing Policy Inventory Update...
Tue Aug 25 11:16:00 MyMac jamf[1001]: Binding MyMac to ad.domain.com...
Tue Aug 25 11:16:13 MyMac jamf[1001]: Bound to Active Directory (ad.domain.com)
Tue Aug 25 11:16:52 MyMac jamf[581]: Informing the JSS about login for user localUser
Tue Aug 25 11:17:22 MyMac jamf[1346]: Checking for policies triggered by "logout" for user "localUser"...
Tue Aug 25 11:17:23 MyMac jamf[1346]: Executing Policy Inventory Update...
Tue Aug 25 11:18:33 MyMac jamf[1775]: Informing the JSS about login for user adUser
Tue Aug 25 11:18:33 MyMac jamf[1775]: Checking for policies triggered by "login" for user "adUser"...