Black screen every minute -> Jam Remot Assist ?

[Stephix]

Hello,
Over the past few weeks, I've noticed the following behavior on several computers:
approximately every 1-2 minutes, the screen of their computer goes black for 1 second and then the display comes back.

This started when I deployed the Jamf PaperCut Print Deploy Client on the computers. 
Having a machine with the problem on hand, I scanned the system logs and every time the screen went black, I had this in the logs:

jamfRemoteAssist[15726] triggered unnest of range 0x7ff85c600000->0x7ff85c800000 of DYLD shared region in VM map 0xc3e4dd3aacf1a315. While not abnormal for debuggers, this increases system memory footprint until the target exits.

system.log

However, Jamf Remote Assist was activated at the end of November and the problem appeared in mid-December (PaperCut deployment). I then deactivated Jamf Remote Assist (Settings -> Computer Management -> Security). 15 minutes later, the machine took note of the change:

Checking for policies triggered by "recurring check-in" for user "j.reynaud"...
The management framework will be enforced as soon as all policies are done executing.
Checking for patches...
No patch policies were found.
Adding launchd task com.jamfsoftware.task.checkForTasks...
Enforcing management framework...
Enforcing scheduled tasks...
Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.1.plist...
Adding launchd task com.jamfsoftware.task.1...
Updating daemon settings
Flushing the /Library/Application Support/JAMF/tmp directory was successful

jamf.log

And since then, no more black screen and this in system log :

jamfRemoteAssistConnectorUI	Recieved DFR status change 4. status = 0x1
jamfRemoteAssistConnectorUI	Reacting to DFR status change 4. status = 0x1
jamfRemoteAssistConnectorUI	Recieved DFR status change 5. status = 0x5
jamfRemoteAssistConnectorUI	Reacting to DFR status change 5. status = 0x5
jamfRemoteAssistConnectorUI	Recieved DFR status change 6. status = 0x1
jamfRemoteAssistConnectorUI	Reacting to DFR status change 6. status = 0x1
jamfRemoteAssistConnectorUI	Recieved DFR status change 7. status = 0x5
jamfRemoteAssistConnectorUI	Reacting to DFR status change 7. status = 0x5
jamfRemoteAssistConnectorUI	Recieved DFR status change 8. status = 0x1
jamfRemoteAssistConnectorUI	Reacting to DFR status change 8. status = 0x1

system.log

Has anyone else had this problem?
The computers have macOS Monterey.

[PaperCutBrenda]

Hi there Stephix, PaperCutter Brenda here hoping to help out! This is an interesting pickle and we're honestly not sure what the causation is, but it sounds like just coincidental timing with the PaperCut deployment.

You could use Console on MacOS to confirm if there are any errors specifically related to the user client. Or you could check the user client log to see if that shows any errors. It can be found in the user’s home directory: /Users/[username]/user-client.log

This article may be of interest as well: https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Troubleshooting_Deployments_wi...

I hope that helps out! If not, please feel free to reach out to us at https://support.papercut.com for more tailored help. Take care!

[Stephix]

Hello,
Thank you for your reply. A coincidence is possible, but when the problem occurred, PaperCut was deployed. Jamf Remote was deployed 2 weeks earlier. It may be an interaction between the two.
The logs are located elsewhere on our school's computers, I have nothing in the place indicated:

Applications/PaperCut Print Deploy Client/data/logs

On the computers I've checked, I can't find any other error apart from an inability to connect to the server outside our school.
I'm going to check the logs on other computers that have this problem.

I'm already in contact with your support team :)

[PaperCutBrenda]

Interesting!

Well we're glad to hear you're chatting with support – surely they'll help hone in on the issue. Take care!

[lokesh_p]

Hello,

We've observed consistent behavior occurring exclusively on Intel Macs across various macOS versions after a few days of Jamf Remote Assist deployment.

The below fixes are working for us. 
1. Remove Jamf framework > reboot the device> re-enroll it.  
2. Disable Graphic Switching from the Battery setting (If you can't see the automatic graphics switching option, your computer only has one graphics system) 

I've extracted "jamf.remoteassist" logs from a machine experiencing screen-blinking issues. These logs are absent on machines not encountering the problem.

2024-01-17 19:29:41.690306 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:41.691348 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:41.691714 (pid/44181 [mdworker_shared]) <Notice>: uncorking exec source upfront
2024-01-17 19:29:41.691732 (pid/44181 [mdworker_shared]) <Notice>: created
2024-01-17 19:29:42.690782 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:42.691762 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:43.691168 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:43.692187 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:44.755472 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:44.755698 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:45.821599 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:45.821751 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:46.786153 (gui/501/com.jamf.remoteassist.connect.userloginagent) <Notice>: service state: spawning
2024-01-17 19:29:46.786195 (gui/501/com.jamf.remoteassist.connect.userloginagent) <Notice>: launching: inefficient
2024-01-17 19:29:46.787808 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: xpcproxy spawned with pid 44322
2024-01-17 19:29:46.787849 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: internal event: SPAWNED, code = 0
2024-01-17 19:29:46.787862 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: service state: xpcproxy
2024-01-17 19:29:46.787869 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: deferred event: domain spawn response: 0
2024-01-17 19:29:46.787876 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: internal event: SOURCE_ATTACH, code = 0
2024-01-17 19:29:46.817901 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: service state: running
2024-01-17 19:29:46.817926 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: internal event: INIT, code = 0
2024-01-17 19:29:46.818065 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: Successfully spawned jamfRemoteAssist[44322] because inefficient
2024-01-17 19:29:46.879733 (pid/44322 [jamfRemoteAssis]) <Notice>: uncorking exec source upfront
2024-01-17 19:29:46.879769 (pid/44322 [jamfRemoteAssis]) <Notice>: created
2024-01-17 19:29:46.883126 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:46.883325 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:47.883574 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:47.883756 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:48.946922 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:48.947159 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:48.998225 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: exited due to exit(1)
2024-01-17 19:29:48.998246 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: service state: exited
2024-01-17 19:29:48.998253 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: internal event: EXITED, code = 0
2024-01-17 19:29:48.998257 (gui/501 [100003]) <Notice>: service inactive: com.jamf.remoteassist.connect.userloginagent
2024-01-17 19:29:48.998261 (gui/501/com.jamf.remoteassist.connect.userloginagent [44322]) <Notice>: service state: not running
2024-01-17 19:29:48.998267 (gui/501/com.jamf.remoteassist.connect.userloginagent) <Notice>: Service only ran for 2 seconds. Pushing respawn out by 8 seconds.
2024-01-17 19:29:48.998332 (gui/501/com.jamf.remoteassist.connect.userloginagent) <Notice>: internal event: WILL_SPAWN, code = 0
2024-01-17 19:29:48.998336 (gui/501/com.jamf.remoteassist.connect.userloginagent) <Notice>: service state: spawn scheduled
2024-01-17 19:29:48.998339 (gui/501/com.jamf.remoteassist.connect.userloginagent) <Notice>: service throttled by 8 seconds
2024-01-17 19:29:48.998353 (pid/44322 [jamfRemoteAssis]) <Notice>: shutting down
2024-01-17 19:29:48.998361 (pid/44322 [jamfRemoteAssis]) <Notice>: cleaning up
2024-01-17 19:29:48.998369 (system) <Notice>: removing child: pid/44322
2024-01-17 19:29:50.012712 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:50.012882 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:51.013082 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:51.013254 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:52.079347 <Notice>: Last log repeated 1 times
2024-01-17 19:29:52.079170 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction
2024-01-17 19:29:53.144339 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Microsoft Teams[1142], error = 159: Sandbox restriction
2024-01-17 19:29:53.144520 (gui/501 [100003]) <Warning>: denied lookup: name = com.apple.audio.audiohald, flags = 0x9, requestor = Google Chrome H[976], error = 159: Sandbox restriction