Posted on 04-26-2021 12:34 PM
I've been ordering new 16" MBPs direct from Apple for some of my team members.
When they receive them, the auto-enroll is not showing the new user account creation screen, completing the setup, and then just displaying the login screen (we have it set to username/password, instead of the list of users).
Checking the local users on the systems, the only account that shows up is the 'jamf' user.
Right now, it's been a small number of users affected by this as the rest of the company is getting either 13" MBPs, or an MBA (both M1s). The M1 systems enroll just fine, prompting the user to create an account.
Has anyone else experienced this? Did I miss a step somewhere when I configured everything? I haven't changed any settings since our initial Jumpstart a couple of months ago.
Posted on 04-26-2021 01:23 PM
Hey Zak, what Setup do you run - JAMFnow or JAMFpro (?), if the latter, which Version of Pro are you running?
Posted on 05-01-2021 06:02 AM
We’re on Jamf Pro v 10.28.0-t1615386406.
Posted on 05-08-2021 01:10 PM
We've seen a few of these too. Not just 16" MBPs, but 13" as well.
We're on Jamf Pro Cloud, v10.28.0-t1615386406.
So far, our only option is to flush all policies for the device, use the recovery partition and wipe/reinstall the OS. Second enrollment works, but not a great 1st day experience.
Posted on 05-14-2021 07:19 AM
We have just experienced this same issue with two 13" MacBook Pro's sent directly to new hires. Jamf Pro Cloud 10.28.0-t1615386406 as well.
We asked the new hires reinstall MacOS from the recovery menu. This only worked for one of them, the other one it did not work.
Posted on 05-14-2021 08:30 AM
Try NOT skipping the "Transfer Information" and "Apple ID" Setup Assistant screens in your Jamf Pro PreStage and try again.
Posted on 05-14-2021 09:55 AM
@ryan.ball is that what Apple recommended ? : ) Also those are the two Setup Assistant screen I 100% don't want the use to see : (
Also we don't see the issue every enrollment ... it's random maybe 40% of the time....
I have reported this issue to Apple and they knew about so please open ticket with Apple so it will ger fixed faster
Posted on 05-14-2021 10:11 AM
@gachowski Setup Assistant is crashing most likely causing the user creation portion to not occur. From trial and error it appears as though not skipping those screens seems to greatly improve the situation. My suggestion was really to provide something for you to test but of course its not ideal (better than having a Mac that you need to wipe though).
Apple/Jamf has not recommended that it but let's see the correlation of folks who are skipping those screens with those having this issue.
Posted on 05-14-2021 11:03 AM
Perfect!!! I just noticed that those Setup Assistant options may not match the newer Big Sur options and Apple said it's Big Sur only so I am going to guess and see what works vs what doesn't in our dev Jamf...
PS great idea FYI I assumed that the GUI set up assistant had nothing to do with the user set up but that is obviously wrong!!
Posted on 05-19-2021 03:52 AM
We saw this a lot, and realised the cause was that the Management Account (under User-Initiated Enrollment) was using the same username as the Administrator account in our Prestage Enrollment profile (I inherited the setup and it never occurred to me that someone would have done that).
Until that was fixed, I would say that we had a 50% local user setup success rate.
Just my 2c's there, hoping that's not how your JP is setup :-D
Posted on 08-26-2021 01:24 PM
Uh, wait what? How would that do anything? Prestage for automated device and a User-Initiated enrolment are too different things. They should never do anything at the same time. I'm so confused by this comment.
Posted on 08-26-2021 02:15 PM
Prestage enrollments use the management account from User-Initiated enrollment setting. : )
Posted on 08-26-2021 03:16 PM
why would it do that, it has an entry for it's own prestage settings. How would it?
Posted on 08-27-2021 08:41 AM
Jamf design decision. It says that right in the GUI of the User-Initiated enrollment setting.
Posted on 08-29-2021 01:32 PM
That's bizarre... I have the same username in both of those sections, never had this issue with it. The only difference is the User-Initiated is set to randomise, and the prestage is set to an actual set password. Weird though.
Posted on 05-26-2021 01:24 AM
Have also seen this sporadically when testing out authenticated enrolment using SSO Enrolment Customisation (Okta as IdP).
When passing the account details through for the user's account using the "Pre-fill primary account information" option, I would sometimes see this issue if I used the built-in option for "Device Owner's Details" and using "Lock primary account information".
I've had better success with the following setup:
- Pre-fill primary account info - On
- Information Type - Custom Details
- Account Full Name - $FULLNAME
- Account Name - Left blank (this auto-populates on the device if $FULLNAME came through properly from Jamf)
- Lock primary account information - unticked
On a few rare occasions, I've not seen the account full name populate on a test device, but since the details aren't locked, I can manually fill it out.
I feel like this may be related; if lock details are used and bad (or no data) comes through, SetupAssistant doesn't like it and bails out of the pane. I could however be completely wrong and all of this coincidental.
(This has been tested on a few physical and multiple VM instances, all with a management account specified in the prestage. Creating the user as standard or admin doesn't seem to affect.)
Posted on 05-27-2021 12:41 PM
@ryan.ball Your suggestion worked for me. I only needed to untick the Transfer Information box in Setup Assistant Options (which translates to the Migration Assistant pane in the Apple Setup). It's a small hiccup (having to have users click Not Now) vs. the entire Setup Assistant bailing and not finishing.
Posted on 08-20-2021 09:01 AM
Hey I just want to ask everyone that is seeing this issue to open a ticket with Apple !!!! The more people that report it the quicker it will get fixed. : )
Posted on 09-14-2021 07:09 AM
Was this ever fixed? I'm still seeing the same issue
Posted on 09-14-2021 07:41 AM
It is not fixed in the current beta's ... please open a ticket with Apple....
Posted on 09-14-2021 07:48 AM
thanks. which betas are you referring to? We are using macOS 11.5.2 and JamfPro 10.32.
Unfortunately we do not have an apple enterprise support contract 😞
Posted on 09-14-2021 11:24 AM
The macOS beta : )
Posted on 10-05-2021 09:35 AM
We had the same issue but I didn't see it mattering what checkbox. We used to have everything but Location Services un-checked. Recently I decided to not show any Setup Assistant options then 11.6 came out. We were scrambling and forgot we hid Setup Assistant and assumed 11.6. We re-enabled Location Services and so far its been stable.
Posted on 10-05-2021 09:36 AM
And Touch-ID is enabled.
Posted on 11-09-2021 01:29 PM
I am seeing this now too, all of a sudden! The M1 Air enrolled fine, the 13" Pro hiccuped the first time but worked after wiping and deleting from Jamf. But a 16" Pro I am trying to re-enroll keeps skipping the User creation (Ive wiped it and deleted it from Jamf three times now).
I had learned that Location, Privacy, and Ts & Cs were needed before or I had issues so I kept those. There is also this new checkbox "Automatically advance through Setup Assistant (macOS 11 or later only)" that I had checked and am wondering what that means? I tried getting more details on it but nothing helpful came back. I tried unchecking and wiping the machine/starting over but nothing changed. Anyone know anything?
Posted on 11-11-2021 08:53 AM
I recommend opening a ticket with Apple ... I have been told that the issue is, the set up assistant randomly crashes creating the 2nd user and that it's not going to change. Three times was the most I have seen however I have a coworker that has seen 5, but we thing the user wasn't erasing the drive correctly.
Posted on 11-22-2021 04:43 PM
I fixed this issue in our environment by limiting the amount of Configuration Profiles we deploy with the PreStage. The magic number was 3.
Posted on 11-23-2021 05:50 AM
I did the same (removed them all actually), as well as re-exposed the Apple ID step. In my cases, I still facilitate setting up the machines first before sending to the employee and while I dont add an AppleID (and skip the step) it seemed to be part of the solution.