Configuration Profiles Being Removed Randomly

[jennifer]

I am seeing some odd behavior with my configuration profiles. Some of the profiles seem to have been removed, and won't go back. On some machines, in the history, the profiles are installed and then immediately removed. On others, its a few months later that they are removed. It shows up in the management history as though a command was sent to remove the profiles, but I don't know where it is coming from (the entries are from multiple dates and times). Additionally, sometimes they will go back, if I edit the profile and chose "deploy to all," and sometimes they won't. In all cases, when you look at the part of the inventory that says which profiles are scoped to the machines, that entry is always correct. It may say 6, and then have 0 profiles installed.

Has anyone seen anything like this before?

This is the history from one I was able to get the profiles to reload back onto (or maybe it went back automatically, based on the time stamp):

Install Configuration Profile ISE Cert - Computer level 12/24/13 at 9:01 AM Install Configuration Profile Screen Saver After 15 Minutes 12/17/13 at 2:50 PM Install Configuration Profile Screensaver Password 12/17/13 at 2:50 PM Install Configuration Profile ISE Cert - Computer level 12/5/13 at 9:39 AM Install Configuration Profile Login Window 12/5/13 at 9:39 AM Install Configuration Profile Screen Saver After 15 Minutes 12/5/13 at 9:39 AM Remove Configuration Profile Login Window 12/5/13 at 9:39 AM Remove Configuration Profile ISE Cert - Computer level 12/5/13 at 9:39 AM Remove Configuration Profile Screen Saver After 15 Minutes 12/5/13 at 9:39 AM Install Configuration Profile SystemUIServer.Plist 12/3/13 at 8:32 AM Install Configuration Profile CD/USB Restriction 12/3/13 at 8:19 AM Install Configuration Profile Screen Saver After 15 Minutes 12/3/13 at 8:19 AM Install Configuration Profile Login Window 12/3/13 at 8:19 AM Install Configuration Profile ISE Cert - Computer level 12/3/13 at 8:19 AM

This is the management history from one of the ones that changed almost immediately, and even though I tried to have them reapply, as you can see, there are no updated entries. (Nothing in failed commands either):

Remove Configuration Profile Screen Saver After 15 Minutes 11/19/13 at 8:31 PM Remove Configuration Profile Login Window 11/19/13 at 8:31 PM Remove Configuration Profile ISE Cert - Computer level 11/19/13 at 8:31 PM Install Configuration Profile Screen Saver After 15 Minutes 11/19/13 at 8:31 PM Install Configuration Profile Login Window 11/19/13 at 8:31 PM Install Configuration Profile ISE Cert - Computer level 11/19/13 at 8:31 PM

A little extra background, when this began, we were running 8.64, we've since updated to 9.22. The update to 9.22 seems to have added this entry into the profile history logs as well (see below). I've no idea if it is related, I saw it when I was grabbing the logs to write this post, haven't even searched JAMFNation yet, but I thought I'd add it in here, just in case.

CertificateList Yesterday at 2:12 PM ProfileList Yesterday at 2:12 PM CertificateList Yesterday at 2:05 PM ProfileList Yesterday at 2:05 PM CertificateList Yesterday at 2:03 PM ProfileList Yesterday at 2:03 PM CertificateList Yesterday at 1:59 PM ProfileList Yesterday at 1:59 PM CertificateList Yesterday at 1:52 PM ProfileList Yesterday at 1:52 PM

[PCHS-IT]

We have noticed something very similar lately in our environment. Where we are seeing this is after imaging mainly though. It will have a installed notification and then a remove notification for each of our configuration profiles. This has really only started recently. We are running version 8.73.