Unreliable Configuration Profiles JSS 9.5

[ngidzak]

I am currently using JSS 9.5 and am having issues deploying changes to Application Restrictions inside a configuration profile.

I needed to add access to an application for the students. (straight forward, hit save, hit deploy to all devices)

Some of my students are using the new configuration policy, and some of them are using the old configuration policy. The weird thing is that it Is occurring on the same computer.

The students are set up identically in AD.

I have come across this in the past with other configuration profiles, and found a way to replicate most of these issues using shell scripting and policy triggers. Unfortunately I cannot find which PLIST file or configuration is used to restrict applications

Does anybody else have this issue? or can help me with the shell scripting alternative.

[alexjdale]

I personally stay away from letting the JSS manage configuration profiles (long history of bugs). I build them myself and package them, installed with a postflight script via the /usr/bin/profiles command, which is way more reliable, just a bit more work (and you'll want to learn how to hand-edit mobileconfig files).

[Kaltsas]

Potentially this issue? https://jamfnation.jamfsoftware.com/discussion.html?id=11958

I've had success with these commands getting configuration profile deployment back on track as suggested in that thread

sudo jamf removeMdmProfile
sudo jamf mdm

[dderusha]

Just had some stuck profiles and as @Kaltsas stated run

sudo jamf removeMdmProfile
and after I manage
sudo jamf removeMdmProfile

dan