Monterey update

[TDManila]

Hello Team, I would like to seek your assistance, as we all know Monterey is in coming and we would like to roll out the upgrade smoothly for end users. However, there's this pop up admin credentials that we have been facing and we just can't give the admin password with end users, question is, is there any script or policy that disable or bypass the admin credential while doing the upgrade? Your response would be a big help from us. Thank you.

[sdagley]

@TDManila You might consider using a Self Service process to install Big Sur rather than having users run the Install macOS Monterey installer directly. The https://github.com/grahampugh/erase-install script (the erase part is optional, and it does support in-place upgrades) can be run from Self Service, and for Intel based Macs will not prompt the user for admin credentials. M1 Macs however do require admin credentials (technically the volume owner's credentials) and there is currently no mechanism to avoid that.

[sgiesbrecht]

@sdagley do you have it set up (Big Sur) on your Jamf System?  Can you send a screenshot of your deployment or supply your steps?

[sdagley · Accepted solution]

@sgiesbrecht I can't upload screenshots, but it's pretty straightforward. Just follow https://github.com/grahampugh/erase-install/wiki/8.-Use-in-Jamf-Pro

[collinslo]

As @sdagley pointed out, I have also implemented the erase-install script in my environment. It's eliminated every headache I've had with performing macOS updates! Our users just needs to perform one-click in self-service and they can walk away for an hour or two (depending on their internet connection). 

[FutureFacinLuke]

@sdagley Thanks for this, really smoothed out the Monterey upgrade process for my users.

[JDaher]

Hello,

I am testing this process and it's worked well for three Intel machines, but it fails on one with the Apple Silicon chip.

This is the command in Files and Processes: /Library/Management/erase-install/erase-install.sh --force-curl --reinstall

This is the error in Jamf logs:

Preparing: 100.0% An error occurred preparing the update. [erase-install] 'Self Service' ended [erase-install] 'caffeinate' ended /Library/Management/erase-install/erase-install.sh: line 945: 4663 Terminated: 15 /usr/bin/caffeinate -dimsu -w $pid [erase-install] 'jamfHelper' ended /Library/Management/erase-install/erase-install.sh: line 724: 5090 Terminated: 15 "$jamfHelper" -windowType $window_type -title "${!dialog_reinstall_title}" -heading "${!dialog_reinstall_heading}" -description "${!dialog_reinstall_desc}" -icon "$dialog_reinstall_icon"

Anybody else has seen this? 

Thank you

[FutureFacinLuke]

M1 Macs need to elevate the user to admin.

A workaround would may be to add a line to the script to elevate before the install kicks in, the user would need to authenticate

something like if logged in user is not a member of /Groups/Admin make the user a member of /Groups/Admin then run script && 

From a Round Table meeting with Apple I believe this is intentional on their part to encourage us admins to use the MDM methods they are adding to 12 and up for deploying updates.

[JDaher]

Thanks for your reply. I understand that, but in our case the logged-in user is an administrator. We do get prompted to enter administrator credentials, and we get as far as the screen-wide banner that pops up saying it's upgrading, but then it just reverts back to the desktop.

I did try to run the script adding the --fetch-full-installer option. We get a little bit further using this option. I can see in the logs that the installer downloaded, but it still returns this error: 

Preparing: 33.9%

Preparing: 34.5%

Preparing: 39.1%

Preparing: 43.7%

Preparing: 43.8%

Preparing: 100.0%

An error occurred preparing the update. [erase-install] 'Self Service' ended [erase-install] 'caffeinate' ended /Library/Management/erase-install/erase-install.sh: line 945: 37028 Terminated: 15 /usr/bin/caffeinate -dimsu -w $pid [erase-install] 'jamfHelper' ended /Library/Management/erase-install/erase-install.sh: line 724: 37101 Terminated: 15 "$jamfHelper" -windowType $window_type -title "${!dialog_reinstall_title}" -heading "${!dialog_reinstall_heading}" -description "${!dialog_reinstall_desc}" -icon "$dialog_reinstall_icon"

[Mac_User_]

Did you find any resolution @JDaher ? We are seeing same errors. 

[JDaher]

Hi,

No, I have not worked on this since last week. 

I posted the issue here: https://github.com/grahampugh/erase-install/discussions/200

I'll update here if I find a solution.