Profiles Disappear from System Preferences

[ctarbox]

On Prem JSS 10.26.1
macOS 11.1

I am creating my first set of macOS Big Sur Deployments on non-M1 iMacs.

I am noticing a strange behavior of iMacs dropping ALL of the Scoped Configuration Profiles listed in System Preferences --> Profiles, EXCEPT FOR the MDM Profile.

Performing a recon will restore the Profiles.

This is happening on random iMacs from a Lab of 38 devices.

Configuration Profile Settings are: Level: Computer Level; Distribution Method: Install Automatically; Profile Payload does not matter.

I do see a lot of CP Known Bugs for 10.26.1, but nothing along these lines. Has anyone else come across this?

Cheryl

[sdagley]

@ctarbox How are you scoping your Configuration Profiles? If they are scoped via a Smart Group any change that causes them to drop out of that Smart Group will trigger removal of the profile. If you've got EAs that are used as Smart Group conditions I've seen instances where the EA data "goes missing", and comes back on the next recon, so check those if you have any.

[jusmep]

I've had this same problem with M1 Macs running 11.3.1, the configuration profiles from the Defender for Mac and the Classroom Configuration all disappeared. These profiles are scoped using a static group. I'm running Jamf Pro 10.27 so not sure if an update to 10.28 should solve this issue. But any suggestions from fellow users would be welcome!

[Rob_Luxton]

I'm experiencing the same issue after upgrading to Big Sur, are there any updates to this issue?

All Config Profiles except the main MDM Profile will go away

[ajufer]

Have the same issue here as well with an M1 MacBook Air running 11.4

Was doing some testing, logged out of the user account, and lost all 22 profiles except the MDM profile. 

[m4k]

The only thing that I have found that fixes this is to assign or unassign a device owner. Profile come back immediately. 

[Jimmyv]

Has anyone found a solution to this problem ?

[Rob_Luxton]

I have opened a ticket with Jamf and it sounds like it is a known issue on Apples side.  There is an open ticket with Apple on this issue

"where this happens after LDAP logins for our AD Bound machines where Configuration Profiles can be removed"

I have rolled all of my machines back to Catalina

[Jimmyv]

Fast response much appreciated.

I’m seeing this on 11.4 which I know is old (limited to support some Avid software. I presume the issue has been seen throughout Big Sur versions 

[lmrosbro]

Hi, just encountered this issue here as well. Machine was on 11.4. We updated it to 11.6, re-enrolled and only 3 profiles besides the MDM profile reinstalled. We had to exclude the computer from the configuration profile deployments, then remove it and they all showed up again.