We have created a configuration profile to block/Defer macOS Sequoia but it is currently pending for 500 of our machines. I know some of these machines are still in use and checking in. Currently it has completed on 1700 machines. I am trying to figure out what could be stopping it from successfully completing on these last 500 machines as I know some of them are actively being used.
The first thing I would check is the network those 500 devices are on, my guess some traffic that Apple requires for MDM is being blocked/filtered/redirected. You can get the Jamf Jet tool from the Jamf Marketplace or the MacEvaluation Tool from beta.apple.com, install it on one of the device and run the tool to see what ports and hosts Apple and Jamf recommended to be opened are blocked.
We are experiencing the same issue in our environment. About 20% of the devices this configuration profile is scoped to are still "pending." Of the 20% that are still pending, at least half of them have been online since the configuration profile was deployed. Not sure what's going on.
This is the time of year when Apple requires you to sign into Apple School Manager or Apple Business Manager and update the terms of service. Sometimes if you don't do this, you can have some issues with things that require the Apple push notification service, such as configuration profiles. Also check Jamf Pro to see if your MDM Push Notification Service certificate is not expired in Settings > Global > Push Certificates.
