jamf MCX in 7.1

[rmanly]

Hello all,
The jamf binary started pulling down MCX on newly imaged machines after
upgrading to 7.1. The box for "Apply Computer Level Enforced Managed
Preferences" is NOT checked.

The problem is we have no MCX settings setup in Casper so it is essentially
pulling down nothing and preventing the machine from getting MCX from OD. I
have tried removing the Managed Prefs folder, rebooting, checking and
unchecking the setting in the JSS to no avail. Also unbound and rebound the
machines to OD / AD even though I know that shouldn't change anything.

These jamf MCX plists are getting recreated even when the machines are off
the network.

Any ideas?

Ryan Manly
GBHSD 225

[#2]

I worked with support on this and this seems to be the resolution (although I'm testing with the bulk of our users).

Ensure you update the Management Frameworks

dscl . -delete /Computers
rm -Rf /Library/Managed Preferences

Reboot the computer after that. The first reboot should be fine for any user preferences. For us, we use OD to show a blurb at the login window (as well as other things). That does not show up after the first reboot. After logging in as a user, it grabs the preferences from the OD server and then, after logging out, applies the blurb at the login window.

Hope that helps out for now. I'm doing more testing, but that seems to resolve the problem for us.

Travis

[Eyoung]

Also make sure USER level MCX is turned off there are two separate settings.

the addition of managed preferences and it being turned on by default in 7.01 was a huge headache.

[rmanly]

This got rid of the jamf MCX plist from directly within the /Library/Managed
Preferences/ directory but I still got a user subdirectory with jamf MCX
within that after rebooting. And I am not enforcing MCX at the computer or
User level from within Casper :(
Are you having to do this on all of your newly imaged machines? So far I
have only done two since upgrading to 7.1 and they both have this issue.

Thanks for the tip.

[rmanly]

Yep User level was off too, forgot about that one in the first email. ;)

[#6]

Unfortunately, it seems that I do have to run these commands after every imaged machine. Seems like a bug right now. My work around will be to run a script on reboot (maybe) to run those commands.

As for your user preference, make sure in your JSS, under: Management > Management Framework Settings > Apply User Level Managed Preferences,

Make sure that option is unchecked. Then run (on your client with the problem):

sudo jamf manage

And then run the previous two commands (dscl and rm) from the previous email. Reboot and see if that helps...

[#7]

Thanks a ton for this. Just upgraded to 7.1 and have this exact same
problem.
--
Brad Rellinger
Technology Specialist
Anthony Wayne Local Schools K-12
brellinger at anthonywayneschools.org << New Email Address