Hi folks,
This one went into a WebEx with JAMF support. I had one end user who received the "Not Authorized" blue screen when trying to run Self Service. His machine was getting ongoing policies, et. al. but Self Service didn't work.
After re-recon'ing his machine, replacing Self Service, deleting and recreating the management account, having me ssh and vnc into his machine with the management account, and everything working correctly, it still showed up "Not Authorized".
Finally, I was getting ready to delete and re-add his machine, and copied the MAC addresses listed in the JSS. JAMF suggested getting them from the actual machine, and what do you know, they were different?!?!?
Updated the MAC addresses to the correct ones, boom, Self Service started working. Now, I've had machines have logic board swaps (GSX shows no service history for this particular machine) and they typically don't show up as being active in the JSS, policies don't run, et. al. JAMF Support is stumped as to why policies (even ones we created on the call) continued to work, when they shouldn't have. The integrity of the DB seems fine.
So, again, if you've exhausted all of the normal results for Self Service showing "Not Authorized", be sure that the MAC addresses match...
--Robert
