The QuickAdd...
(1) installs the /usr/local/sbin/jamf binary (used to be /usr/sbin/jamf):
(2) runs a postflight script that creates the plist to point the binary to JSS, sets SSH, and then runs the enrollment command (enforce management framework, including creating the management account, login/logout hooks, etc., etc.).
If QuickAdd fails, its usually because the postflight script fails.
Confirm that the binary installed:
$ which jamf
/usr/local/sbin/jamf^^^ If this comes back with /usr/sbin/jamf, your QuickAdd is old.
Once confirmed, you can manually enroll the Mac using the sudo jamf enroll -prompt command.
The first prompt is asking you to authenticate the sudo command. The next two prompts are for your JSS account name/password. Your account will need rights to enroll computers (there may be a few more rights checkboxes needed).
$ sudo jamf enroll -prompt
Password: <your-admin-password>
JSS Username: <your-jss-username>
JSS Password: <your-jss-password>
SSH Username: <your-jss-username>
SSH Password: <your-jss-password>
Downloading required CA Certificate(s)...
This computer was successfully enrolled to the JSS with the following device certificate: "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX"
Retrieving inventory preferences from https://server.domain.com:8443/...
Finding extension attributes...
Locating applications...
...[snip]...
...[snip]...
...[snip]...
Submitting data to https://server.domain.com:8443/...
<computer_id>XXXXX</computer_id>
Getting management framework from the JSS...
Enforcing management framework...
Checking availability of https://server.domain.com:8443/...
The JSS is available.
Enforcing login/logout hooks...
Enforcing scheduled tasks...
Creating launch daemon...
Creating launch agent...
Checking availability of https://server.domain.com:8443/...
The JSS is available.
Checking for policies triggered by enrollmentCompleteNOTE: When you use your JSS credentials for both items in the above command, your JSS username becomes the management account for that Mac. Might want to spin up a policy that checks management account name, so if it isn't the right account, the policy corrects it.
For more info:
$ jamf -help enroll
Usage: jamf enroll [-prompt | -invitation] [-noRecon] [-noManage]
-prompt Prompts for JSS and SSH credentials.
-invitation Uses an invitation ID for credentials instead of a user name and password.
-noRecon Stops enroll from acquiring inventory.
-noManage Stops enroll from enforcing the management framework.
-noPolicy Stops enroll from checking for enrollment policies.
$
