Posted on 10-13-2016 11:15 AM
We are currently running JSS 9.93 , Self service 9.93 and have only updated a handful of machines to Sierra (10.12).
Immediately, there are all sorts of issues. Everything from profiles not getting installed, tons of "pending" commands, Apps fail to run (google drive specifically the worst), VPN fails, etc. Even self service is having issues checking in..
Is there something I'm missing as far as configuring JAMF for Sierra or vice versa??
Solved! Go to Solution.
Posted on 10-14-2016 01:52 PM
Posted on 10-13-2016 11:19 AM
Posted on 10-13-2016 11:20 AM
9.96 is officially supported for Sierra.
Posted on 10-13-2016 11:23 AM
Ok, so I've updated to 9.96, Self serv 9.96 for entire system. The issues remain.
For example, on my admin MacBook Pro (10.12) I have 8 pending commands, which I've canceled then restarted the machine and forced check-in, yet they will never complete nor fail. They just sit in pending for hours.
On other machines, we're seeing problems where JAMF says the profile has been removed, but it still shows on the device itself. Even after forcing a reboot/check-in..
The log shows "completed".
This is currently happening on 18 different devices...(that I'm aware of) and probably more.
Luckily, we've blocked all iOS from updating...
Posted on 10-13-2016 01:55 PM
We have about 20 Sierra machines enrolled in 9.93 without issues, the only real issue I have encountered so far is Casper Remote logs don't work at all.
Posted on 10-14-2016 09:17 AM
We're actually still on 9.81. We don't use MDM, but everything we do use with Sierra works perfectly.
Posted on 10-14-2016 01:52 PM
Posted on 10-16-2016 08:55 AM
Same as the others, up until a few hours ago we were running JSS 9.82 and it was working with Sierra beta and GM (generally speaking): policies (package installs and scripts). Have upgraded our instance to 9.96 to ensure full compatibility.
Posted on 10-16-2016 09:56 PM
do you have a proxy server? or proxy settings?
Posted on 10-17-2016 10:29 AM
Posted on 10-17-2016 01:18 PM
the command jamf checkJSSConnection works?
Posted on 10-17-2016 03:11 PM
"The JSS is available."
I have also used:
Does re-enrolling the same device multiple times cause issues??
Posted on 10-17-2016 11:52 PM
you have a valid connection with JSS but the MDM command will not pushed. Check whether the push certificate is valid and then enrollen equipment new.
Posted on 10-18-2016 07:48 AM
@ivanlovisi The cert is valid till 7/26/17.
Will enrolling the same device more than once cause issues?
For example, when adding devices to Microsoft SCCM- if there is any kind of duplicate record, it creates a nightmare trying to manage things... Does JAMF act similarly?? Or can I just get re-enroll happy?
Posted on 10-18-2016 01:56 PM
@cruess We re-enroll devices pretty often here for a variety of reasons, it seems to just pick up the existing record for the same machine, although I think it flushes the logs as well so you might find once per computer policies being re-run.
Posted on 10-19-2016 12:00 AM
don't worries, you can without problems re-enroll machines .
I hope after that the mdm command works.
Posted on 12-13-2016 05:18 PM
Try the Casper recon with no one log into the system. Watch JSS and see the polices flood in those commands should install
Posted on 12-13-2016 07:04 PM
One other thing to look at is if your in a clustered environment ensure the "Master" is actually running and connected to the Database. We ran in to this about a month ago thanks to a DNS issue where our "Master was offline" and MDM commands were very hit and miss. Mostly miss.
Posted on 12-14-2016 07:25 AM
I usually run the command to remove the mdm profile then do a jamf manage command to bring it back. Seems to work.
#!/bin/sh sudo jamf removemdmprofile
#!/bin/sh sudo jamf manage
Princeton Public Schools
Posted on 09-14-2018 07:53 AM
I was given the command:
Which forced a re-download of the certs, once approved- things seem to be functional again. re-enrolling was having issues..