Monterey update

TDManila
New Contributor III

Hello Team, I would like to seek your assistance, as we all know Monterey is in coming and we would like to roll out the upgrade smoothly for end users. However, there's this pop up admin credentials that we have been facing and we just can't give the admin password with end users, question is, is there any script or policy that disable or bypass the admin credential while doing the upgrade? Your response would be a big help from us. Thank you.

tdcxmanila_0-1634105226118.jpeg

 

1 ACCEPTED SOLUTION

sdagley
Esteemed Contributor II

@sgiesbrecht I can't upload screenshots, but it's pretty straightforward. Just follow https://github.com/grahampugh/erase-install/wiki/8.-Use-in-Jamf-Pro

 

View solution in original post

10 REPLIES 10

sdagley
Esteemed Contributor II

@TDManila You might consider using a Self Service process to install Big Sur rather than having users run the Install macOS Monterey installer directly. The https://github.com/grahampugh/erase-install script (the erase part is optional, and it does support in-place upgrades) can be run from Self Service, and for Intel based Macs will not prompt the user for admin credentials. M1 Macs however do require admin credentials (technically the volume owner's credentials) and there is currently no mechanism to avoid that.

sgiesbrecht
Contributor III

@sdagley do you have it set up (Big Sur) on your Jamf System?  Can you send a screenshot of your deployment or supply your steps?

sdagley
Esteemed Contributor II

@sgiesbrecht I can't upload screenshots, but it's pretty straightforward. Just follow https://github.com/grahampugh/erase-install/wiki/8.-Use-in-Jamf-Pro

 

collinslo
New Contributor II

As @sdagley pointed out, I have also implemented the erase-install script in my environment. It's eliminated every headache I've had with performing macOS updates! Our users just needs to perform one-click in self-service and they can walk away for an hour or two (depending on their internet connection). 

FutureFacinLuke
Contributor II

@sdagley Thanks for this, really smoothed out the Monterey upgrade process for my users.

JDaher
New Contributor III

Hello,

I am testing this process and it's worked well for three Intel machines, but it fails on one with the Apple Silicon chip.

This is the command in Files and Processes: /Library/Management/erase-install/erase-install.sh --force-curl --reinstall

This is the error in Jamf logs:

Preparing: 100.0% An error occurred preparing the update. [erase-install] 'Self Service' ended [erase-install] 'caffeinate' ended /Library/Management/erase-install/erase-install.sh: line 945: 4663 Terminated: 15 /usr/bin/caffeinate -dimsu -w $pid [erase-install] 'jamfHelper' ended /Library/Management/erase-install/erase-install.sh: line 724: 5090 Terminated: 15 "$jamfHelper" -windowType $window_type -title "${!dialog_reinstall_title}" -heading "${!dialog_reinstall_heading}" -description "${!dialog_reinstall_desc}" -icon "$dialog_reinstall_icon"

Anybody else has seen this? 

Thank you

M1 Macs need to elevate the user to admin.

A workaround would may be to add a line to the script to elevate before the install kicks in, the user would need to authenticate

something like if logged in user is not a member of /Groups/Admin make the user a member of /Groups/Admin then run script && 

 

From a Round Table meeting with Apple I believe this is intentional on their part to encourage us admins to use the MDM methods they are adding to 12 and up for deploying updates.

Thanks for your reply. I understand that, but in our case the logged-in user is an administrator. We do get prompted to enter administrator credentials, and we get as far as the screen-wide banner that pops up saying it's upgrading, but then it just reverts back to the desktop.

I did try to run the script adding the --fetch-full-installer option. We get a little bit further using this option. I can see in the logs that the installer downloaded, but it still returns this error: 

Preparing: 33.9%

Preparing: 34.5%

Preparing: 39.1%

Preparing: 43.7%

Preparing: 43.8%

Preparing: 100.0%

An error occurred preparing the update. [erase-install] 'Self Service' ended [erase-install] 'caffeinate' ended /Library/Management/erase-install/erase-install.sh: line 945: 37028 Terminated: 15 /usr/bin/caffeinate -dimsu -w $pid [erase-install] 'jamfHelper' ended /Library/Management/erase-install/erase-install.sh: line 724: 37101 Terminated: 15 "$jamfHelper" -windowType $window_type -title "${!dialog_reinstall_title}" -heading "${!dialog_reinstall_heading}" -description "${!dialog_reinstall_desc}" -icon "$dialog_reinstall_icon"

Mac_User_
New Contributor III

Did you find any resolution @JDaher ? We are seeing same errors. 

JDaher
New Contributor III

Hi,

No, I have not worked on this since last week. 

I posted the issue here: https://github.com/grahampugh/erase-install/discussions/200

I'll update here if I find a solution.