How to create a smart group to find machines that don't have Profiles installed.

[steventhemacman]

Hi,

For some reason we have many many client laptops that seem to have partially un-enrolled themselves. They can be seen in JSS, but if you look on the client they don't have the MDM profiles. Remoting to them may work, but usually not. If we run quickadd it works (if quickadd runs, if fails at a high rate), running Recon locally works too.

Anyways, we probably have a few hundred machines we need to do and if I don't have to manually go out and find them I would be happy. I was looking for a way to create a smart group to find the machines with no MDM installed, but I can't seem to find out how to do that.

I am not sure how this happened, as of imaging they all should have been in...

Thanks!

[LarryH]

Take a look at this thread about tracking profiles. I have a smart group based off of extension attributes for profiles.
https://jamfnation.jamfsoftware.com/discussion.html?id=6838
https://jamfnation.jamfsoftware.com/discussion.html?id=5959

[etippett]

I've noticed this issue too. So did Rich Trouton. Check out his blog post on setting up an automatic fix. I've used it to great success.

http://derflounder.wordpress.com/2013/08/31/automatically-fixing-casper-mac-mdm-enrollment/

Eric

[alexjdale]

I have an extension attribute that is just the result of "profiles -L' which lists all of the profiles installed. I then build smart groups around those with "like" or "not like" criteria and it works great.