Machine not being scoped for a configuration profile that is for all machines?

[cpizanias]

I have a config profile scoped to all machines but for some reason my test machine isn't picking up the profile. It's picking up policies that are scoped to all machines just not this.

I've tried reimaging the machine, removing it from the jss and re-enrolling, editing the config profile to force a distribute but for some reason this one machine keeps saying it's not within any config profile scopes and therefore it won't apply.

Anyone have any thoughts?

[dgreening]

Is this a computer level or a user level profile? If its a user level one, you may need to do a "jamf mdm -userlevelmdm".

[cpizanias]

@dgreening it's computer level

[cpdecker]

Under Computers > Specific Computer > Management > Configuration Profiles, are the intended configuration profiles listed there?

[cpizanias]

@cpdecker No it's saying 0 in scope under the option and "No configuration profiles" when selected.

[cpizanias]

Just to add to things i've tried: i deleted the machine from the JSS and changed the computer name then re-enrolled, i deleted the mdm and re-enrolled that and i tried making a brand new blank config profile to push out and it this machine still says "0 in scope" despite it being set for all machines.

[bentoms]

@cpizanias Does the Mac show as "managed" & is the "MDM Capable" set to yes?

[cpizanias]

@bentoms Yes to both, and is giving an MDM identifier as well. Still no luck getting it to scope to the config.

[cpdecker]

This may not be very helpful but if it's not under Computers > Specific Computer > Management > Configuration Profiles I take that to be a scope issue. Are you absolutely sure you have it scoped correctly? No exclusions, no limitations?

[cpizanias]

@cpdecker I'm definitely willing to entertain the notion that I have it scoped wrong but if so I can't see how.

Album below of scope of profile and the machine not showing it. The machine is in the right site for the policy. I edited it just to hide the company name:

http://imgur.com/a/4O1k2

[cpdecker]

What if you set it to all computers, specific users and leave nothing defined for users? Grasping at straws but that is how I configure mine.

[cpdecker · Accepted solution]

Also I am not using sites so that could be introducing some volatility on your setup.

[cpizanias]

@cpdecker Yeah you're right, I set it to all sites and it worked. It's tricky for us because we have multiple offices but this config is pretty innocuous so I just flipped it to all. I'll have to play around but for now it's working. Thanks for your help.

[cpdecker]

Glad we got it figured out!