Skip to main content
Question

Computer not enrolling with DEP


Forum|alt.badge.img+13

Our DEP isn't working in QA (it looks like some ports may need to be opened), so I tried PROD just to play around with DEP. We're currently on 9.81 in PROD and 9.96 in QA (we need to do some backend changed before upgrading). I assigned the test device to our PROD JSS, and got the prompt to configure it on start-up. I entered my credentials and got prompted to create an account. I checked out the profiles, and saw the MDM profile in there, so I figured it was successful.

I checked out the computer record, but the inventory hadn't fully updated (no OS version, hardware info etc). I then created a smart group based on the Prestage Enrollment group, but it didn't show up. That's when I realized it wasn't managed, and checked the machine and the jamf binary wasn't on the device. I had user-initialized enrollment configured as I saw in another thread. The only thing that I could think of, was I had all LDAP users set to enroll institution-owned devices only, but there's no option for that in the Purchasing tab, so I don't know how to define that. I made all LDAP users able to enroll both institution and personal-owned devices now. My ID is part of the admin group anyway, so that shouldn't be the issue.

I re-imaged the device to try with all users able to enroll, but still no go. I got logged in and went through Safari to manually enroll (had to refresh each page in the process and manually download the package before I could run it, but it worked). So, there's something happening with this enrollment process, but I'm not sure if 9.96 will magically fix it or not. Anyone else run in to this type of issue?

29 replies

Forum|alt.badge.img+11
  • Contributor
  • 82 replies
  • October 27, 2016

I also just ran into this issue yesterday, and the only way I could get it to move forward was to manually enroll. Once I manually enrolled, then it added itself to the prestage based smart group and the proceeded with the rest of my DEP workflow. I don't know what happened, nothing has changed on my end.

Edited to add: We're also on 9.96.


Forum|alt.badge.img+8
  • Contributor
  • 10 replies
  • October 28, 2016

I am also on 9.96 and am having the same issue. It is sporadic.


Forum|alt.badge.img+18
  • Valued Contributor
  • 127 replies
  • December 12, 2016

Did any of you guys figure this out?
I am trying out Casper in the cloud, and trying out DEP at the same time, and it runs 9.96.
DEP is enrolling the devices - they show unmanaged, and there is no jamf binary present.

I don't know how to fix this.

-Bruce


Forum|alt.badge.img+3
  • New Contributor
  • 7 replies
  • January 5, 2017

I am running into this now too. I am on 9.97 cloud based. The only way around I have found is to user-initiate enrollment.


bmortens115
Forum|alt.badge.img+14
  • Contributor
  • 33 replies
  • January 5, 2017

I am having the same issue with a cloud hosted 9.97 JSS and DEP. The computer seeings the DEP prompt that it will be managed, but then the JAMF binary is never installed, the computer shows in the JSS as managed. Anyone having any success using DEP enrollment?


Forum|alt.badge.img+6
  • Contributor
  • 33 replies
  • January 5, 2017

I'm having DEP issues today as well. Computer is assiged to a Pre-stage, but does not hit DEP during Setup Assistant.


Forum|alt.badge.img+18
  • Valued Contributor
  • 127 replies
  • January 5, 2017

So for our issue I reported in December, I spoke to JAMF.
They mentioned that, in the payload for the DEP Prestage enrollment, don't add anything in the "Account Settings" section.
It will cause the enrollment to stop before the binary is laid down and enrollment with Casper is complete.
He mentioned it's a defect, but I am not sure what the number is.

So we are currently doing the Prestage enrollment with basic settings and using our create-administrator.pkg file like we usually do.


Forum|alt.badge.img+7
  • Contributor
  • 19 replies
  • January 6, 2017

Seeing this behavior consistently on a couple MacBooks and sporadically on Mini. For me, it sees a configuration and goes into the process of installing it and then bombs out to create computer account. If I do that, it does not install much at all. After a reboot or two, it does show up as managed and has information attached, but it is obviously not complete the way it should be. Have a case open for this but with the impending snow in NC I likely won't get to test/troubleshoot until maybe Tuesday.


DBrowning
Forum|alt.badge.img+24
  • Esteemed Contributor
  • 668 replies
  • January 24, 2017

Starting seeing this issue Yesterday (23Jan2017) where it was working perfectly last week. I'm on 9.96 on-prem.

I've changed the Prestage to be very minimal and still no luck.

Any help would be greatly appreciated.


Forum|alt.badge.img+8
  • Contributor
  • 40 replies
  • January 24, 2017

I'm also seeing the same thing, was working last week as well. I had a machine i left running over night to see but it looks like nothing had happened in terms of enrollment , etc


Forum|alt.badge.img+5
  • New Contributor
  • 6 replies
  • January 31, 2017

Throwing my hat into the ring as well, we started seeing it January 21st and are on 9.96 on premise. We've confirmed with Apple that recently enrolled devices are asking the JSS for a profile but not receiving one. Opening a ticket JAMF.

We are seeing if the manual refresh will help, just did the first refresh about an hour ago. Here's the entry from the Casper Admin Guide:

"Refreshing DEP Instance Information

The JSS allows you to manually refresh information in the DEP instance as needed.

  1. Log in to the JSS with a web browser.
  2. In the top-right corner of the page, click Settings images/download/thumbnails/12988078/Settings_icon.png .
  3. Click Global Management.
  4. Click Device Enrollment Program images/download/thumbnails/12988078/Device_Enrollment_Program.png .
  5. A list of program instances is displayed.
  6. Click the program instance you want to refresh.
  7. Click Refresh.

If there is updated information in DEP, this information is displayed in the JSS."


DBrowning
Forum|alt.badge.img+24
  • Esteemed Contributor
  • 668 replies
  • January 31, 2017

Ended up working with JAMF Support and come to find out Java was updated on our server which was causing issues. Once we confirmed that Tomcat was looking at the correct version folder for JRE and updated the JCE policy files, everything started working again.


Forum|alt.badge.img+8
  • Contributor
  • 10 replies
  • March 29, 2017

Do we have an answer for this? DEP not enrolling initially is very sporadic.


Forum|alt.badge.img+3
  • New Contributor
  • 2 replies
  • May 23, 2017

I too am having this issue. Laptops are very unreliable about triggering DEP during Setup. We are using Jamf Cloud so don't have any control over Java or anything.


Forum|alt.badge.img+4
  • New Contributor
  • 7 replies
  • May 23, 2017

Same issue here...DEP triggers during setup, enter in the account details and then sits on the desktop not doing anything. Used to work prior to 9.97 but we are on a Cloud instance so I can't roll back.

Noticed in the config URL it points to jssinstance/cloudenroll. The link itself doesn't work from a web browser so not sure if that link has modified in anyway.


Forum|alt.badge.img+1
  • New Contributor
  • 3 replies
  • May 24, 2017

Hm, we're having issues as well. DEP is configured, Pre-stage is configured, but the MacBooks selected are not triggering DEP during startup. Our instance is cloud based as well. Anyone come across a solution?


Forum|alt.badge.img+4
  • Contributor
  • 17 replies
  • June 2, 2017

Same issue here as well. We're on cloud-managed 9.98. Sporadic behavior - Some laptops semi-enroll and appear in Jamf computer list but do not receive the Jamf binary; upon reboot they are fully enrolled. And some DEP laptops do not enroll at all after initial setup.


Forum|alt.badge.img+8
  • Contributor
  • 40 replies
  • June 2, 2017

@steagle im on 9.96 and having a specific weird issue posted here : https://www.jamf.com/jamf-nation/discussions/24237/dep-w-10-12-5-done-from-internet-recovery-account-creation-issue

going up grade jss to see if it changes


Forum|alt.badge.img+4
  • Contributor
  • 17 replies
  • June 7, 2017

FYI the Jamf tech support person who is dealing with my case said this is a known bug and to disable the Account Settings payload in order for DEP enrollment to fully complete. This is a little inconvenient for me because I ship new laptops over to our Berlin office where I am relying on DEP to create my admin account and auto-enroll users, as we have no IT support on site there, but I can come up with a workaround. Hopefully this gets worked out soon though because the Account Settings payload is one of the best features of prestage enrollment.


Forum|alt.badge.img+18
  • Valued Contributor
  • 127 replies
  • June 7, 2017

I concur with @steagle Once I made that change, it started working again for us.
We currently deploy a pkg to create our administrator account, but a full DEP workflow will change the order of operations somewhat.


Forum|alt.badge.img+3
  • New Contributor
  • 9 replies
  • July 21, 2017

@steagle , thanks for posting this. Had been having this issue, this just saved me a bit of time. Still need to package up the accounts, but this gets my DEP enrollment working (again). Do you happen to know if there is an associated issue number?

For others, can confirm this issue exists on 9.99.2 too.


Forum|alt.badge.img+3
  • New Contributor
  • 3 replies
  • August 4, 2017

Same issue here, I would like to skip account creation, but enabling Account Settings payload producing unmanaged Macs. Most likely I will open a ticket with JAMF support.


Forum|alt.badge.img+7
  • Contributor
  • 28 replies
  • August 5, 2017

Same issue here as first reported by @ jkuo. We are on JSS 9.100.0-t1499435238 hosted version. Support stated that the accounts payload issue was fixed in 9.8 version and the troubleshooting is on-going. Worth it to re-test without the accounts payload just in case. Also seeing that manual enrollment using "jamf enroll -prompt" from the terminal restores functionality and other packages start flowing as they should.
Unfortunately removing the Accounts payload did not work for me.


Forum|alt.badge.img+9
  • Contributor
  • 127 replies
  • August 25, 2017

Hello All

Is there an update to this issue before I submit a support request?
We are on 9.10 (Hosted).
There is a laptop which will not accept the configuration or enrol into Jamf Pro yet I see the 'Configuration page' during set up. We are not creating accounts using Account Settings, just using the predefined Management Account. I can say it used to work prior to the .10 upgrade.

Ash


Forum|alt.badge.img+7
  • Contributor
  • 28 replies
  • August 25, 2017

In additional testing for us, configuring anything other than the general tab in PreStaged Enrollment breaks the process. Also the machine if ending up in the "none" site even though a specific site is configured in DEP setup and in the PSE. Support acknowledges this to be an open issue that they are expecting to fix soon.


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings