Sierra, Mac App Store Apps won't load, "Enabling MDM for local user account failed"

ldanque
New Contributor

HELP! Ongoing issues installing Mac App Store Apps on our computers. Installers worked fine with OSX 10.11.6. Upgraded to OSX 10.12.6 and now we're having issues. Students can't install any Apps from the App Store/VPP Purchased. Other policies and Applications install with no issues.

After talking with JAMF Support, created a script that worked on some computers, not all.:

!/bin/sh

Sudo jamf removeMdmProfile
sleep 5
Sudo jamf mdm

Script fails with error:

Script result: Getting management framework from the JSS...<br/>Enabling MDM...<br/>Error installing the computer level mdm profile: profiles install for file:'/Library/Application Support/JAMF/tmp/mdm.mobileconfig' and user:'root' returned 102 (New profile does not meet criteria to replace existing profile.)<br/>Downloading required CA Certificate(s)...<br/>Retrying the user level mdm profile install.<br/>Error installing the computer level mdm profile: profiles install for file:'/Library/Application Support/JAMF/tmp/mdm.mobileconfig' and user:'root' returned 102 (New profile does not meet criteria to replace existing profile.)<br/>Problem installing MDM profile.<br/>

Whats next? This is occuring over several different Casper Severs in different school districts and 1000+ computers.

1 REPLY 1

McAwesome
Valued Contributor

How are your accounts set up? On 10.12, Apple killed support for multiple local MDM users. They only allow the first user to become the MDM capable user.

https://www.jamf.com/jamf-nation/articles/372/enabling-mdm-for-local-user-accounts