MDM Capability = No. Verify MDM Enrollment = Enrolled

[Bernard_Huang]

Hi all,

I'm trying to make our cofiguration profile work for our macbooks. I'm noticing for new Macbooks to be enrolled, I get MDM Capability = No. Verify MDM Enrollment = Enrolled.

With MDM Capability = No, it mean none of the Configuration Profile would be pushed to them. I've read on past JAMF Nation discussions
https://jamfnation.jamfsoftware.com/discussion.html?id=19266
https://jamfnation.jamfsoftware.com/discussion.html?id=11948

that this push MDM actually is dependent on Apple, and running sudo jamf mdm may trigger it to work.

But when I do run

/usr/local/bin/jamf removeMdmProfile
/usr/local/bin/jamf manage
/usr/local/bin/jamf mdm

all I get is Verify MDM Enrollment = Enrolled.

Any other ideas on how to activate this MDM? Right now half our Macbooks have MDM, but the other half have this turned off. I'm puzzled as to what is required.

[Bernard_Huang · Accepted solution]

Never mind, I got the explanation as to why our MDM Capability is not responding.
All our Macbook sits behind our company's proxy, which effectly blocks certain traffic to external internet.

So for us, the only Macbooks that can get the MDM Capability are the ones that had previously connect to a real internet connection (eg: If someone brings their Macbook home for use).
This explains why half our fleet of Macbooks have this active and half don't.

Not a solution per say, but we accept the explanation.

[isradame]

I have the same issue, but when if I use the "jamf enroll -prompt" commands, the MDM along with the configuration profiles get pushed.
This just started to happen with JAMF 9.96.

[addigyguru]

Issue resolve !! Thank you

[mani2care]

The perfect solution is without doing the action

sudo jamf mdm -userLevelMdm
sudo Jamf manage

MDM Capability: Yes will be changed

[whiteb]

We have a very small handful of machines like this. They still have all of our profiles installed and are checking in, but no management commands available in Jamf + MDM Capability shows 'No'.

sudo profiles renew -type enrollment

Running the above, even with an existing MDM Profile installed, fixed the issue.

I tried a sudo jamf enroll -prompt to re-enroll first, which completed without issue, but still MDM Capability 'No' and no management commands for the computer in Jamf.

Only after running the profiles renew command and accepting the little message that pops-up did the computer get fixed. This computer was an M1 iMac on 13.2.1.

Appears some computers lose their MDM Capability for no apparent reason.