Cannot reach a Jamf MDM Server after macOS Onboarding

My brain goes to a VPN client, or Network Security tunnel doing things.

Three things come to mind.

• Can you Ping your Jamf Server?
• Can you navigate to your Jamf Servers web portal?
• Are any other network services impacted? (sharedrives, internal homepage, etc)

Can yo ping the jamf server
    Yes we opened a terminal and were able to ping ip and dns host name of the server

Can you navigate to your jamf server web portal
    yes we were able to reach the jamf portal
any other network services impacted
    no, other prestiges were still able to continue to device enrolled with no issues, 
   only one that was impacted with this new prestage

   we could not see anything else not working. as it was ethernet hardwire connected ...

Hrm. I trust this issue is isolated to the one customer in question, well I hope at least :). 

Seems like the Jamf Binary may be borked from a failed enrollment. Without a direct slam dunk answer, I would start checking logs and make sure the MDM Profile has the correct server URL and the certificates are good. Logs would be anything related to com.jamfsoftware.* in console. However, a reenroll will likely be the fastest path to resolution.

I have never found this command useful but sudo jamf checkJSSConnection will tell you if the Jamf binary can see Jamf.

1) when we look in settings under the profiles we can see all the profiles from jamf installed

2) we looked at the /Library/Preferences/com.jamfsoftware.com.  for the jss_url variable, and it was set correctly.
3) jamf checkJSSCOnnection - reported connection successful.. no issues there.

4) we have wiped and re-enrolled a number of times and keep having this issue....
- logs have been collected now and sent to jamf for the ticket that has been opened...
yes to certificates also appear to be good and valid, no issues...

yes isolated to this customer

What happens if you try to run jamf recon/policy. did you try running 

sudo profiles renew -type enrollment

yes to the sudo profiles renew - it failed
recon failed also.

which points to the jamf binary enrolment did not complete....  which we believe is the cause of the message... but the fault that is causing this to happen is the mystery...

again the other pre-stages the customer has setup are all working just fine.. only this new one, that seems to have a problem.

Could you please check User initiated enrollment is set to disabled?

so it is currently enabled.  the jamf documentation says you have to enable launch self service after enrolment under the user enrolment section.. you can only do that if you enable user enrolment....

https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/macOS_Onboarding.html

Have you tried deleting the Jamf device record? Sometimes there is something screwed up in the database for a specific record and deleting it may help. Of course you would have to enroll again after deleting it.

yes we always recommend and do delete the device object before a re-enrollment...

 Is this issue still exist or resolved by now ?