@poormatt I was under the impression that “Supervised” being displayed as “No” was a visual (bogus) anomaly with no practical impact on management of Macs...?
As far as I can tell, “Download and Install Updates” MDM command has never worked - at least for me (and definitely does not work on any version of Big Sur - regardless if the Jamf computer record shows “Supervised” or not). I recall being told that this particular MDM command was not fully implemented in Jamf (i.e.; the button in the “Management” tab doesn’t actually do anything)...?
@dstranathan It's visual BS as far as it not being managed - when I look at Profiles on the device it says it's supervised. However, in the Jamf Pro console, it's treated as if it's only managed, with the Supervision only options not available.
As far as the button not working, this last go around I have updated both Silicon and Intel macs using it. My understanding is that of the several options that are available for the MDM command, only two are implemented. You actually see them in the pending/completed/failed commands when you run it. The caveats I found were that it took FOREVER. It downloads the update and then processes the download before it actually starts updating. The processing took over 30 minutes. The download depends on the internet speed of course. All that was done in the background, so there was no indication anything was happening - I kept an eye on Activity Monitor and was able to tell what was going on.
Depending on what type of user was logged in I got two behaviors. A standard user being logged in meant that once it was done processing, it rebooted right away with no notice. Needless to say that is kind of a bummer, be nice to be able to schedule it or at least get a heads up to save work. If an admin user was logged in, a notification came about in the upper right as notifications to that read something to the effect of "An update is requested to be performed by an Administrator". If you click on the notification, it takes you to Software Update in system prefs where you can tell it to update. If you cancel the notification, that's the end of the line. No update takes place and life goes on. All this is frustrating as the softwareupdate command requires human interaction with the Silicon macs so traditional workflows don't work properly right now.
@poormatt I have never ran the “Download and Install Updates” command on a Mac with a user logged into the console - which may certainly explain my experience. Good to know!
Related note: I have started testing Erik Gomez’s Nudge project to try and proactively “nudge” users to update macOS themselves. Needless to say that a lot of us are not happy campers about the lack of native software update and SUS options going forward (via MDM commands or otherwise). I have submitted my thoughts and feedback to Appleseed as well as my Apple Enterprise rep and engineer.
Case opened with support for weeks/months. Still no real fix except resetting the enrollment on my macs (which I won't do).
And even doing that makes the supervision disappear just after a simple recon, even on my DEP-enrolled computers.
Still happening on 10.29.0, and I didn't see the PI-008666 being fixed in 10.30.