Skip to main content
Solved

upgrade to 9.92 now not running policies on enrollment

  • June 14, 2016
  • 11 replies
  • 90 views

Forum|alt.badge.img+20

Just had an upgrade from 9.81 to 9.92, I have now noticed that since the upgrade, policies that run on 'Enrollment' are not running.

looking at the /var/log/jamf.log shows 'checking for policies triggered by "enrollmentComplete" but none of the enrollment policies are listed to of executed.

JSS policy logs for the enrolled computer is blank

Has anybody else encountered this ?

Best answer by millersc

It appears you hit a bug..... D-009861.

I've also added this to the unofficial bug tracker:
https://jamfnation.jamfsoftware.com/featureRequest.html?id=1699#responseChild14176

To view defects peruse through here:
https://goo.gl/zTdvwT

To submit bugs:
http://goo.gl/forms/tEvpXJrZaj

11 replies

Forum|alt.badge.img+10
  • New Contributor
  • Answer
  • June 14, 2016

It appears you hit a bug..... D-009861.

I've also added this to the unofficial bug tracker:
https://jamfnation.jamfsoftware.com/featureRequest.html?id=1699#responseChild14176

To view defects peruse through here:
https://goo.gl/zTdvwT

To submit bugs:
http://goo.gl/forms/tEvpXJrZaj


Forum|alt.badge.img+20
  • Author
  • Contributor
  • June 14, 2016

via https://goo.gl/zTdvwT it looks like the bug started in 9.82 and in 9.92 it still is not fixed ??


Forum|alt.badge.img+20
  • Author
  • Contributor
  • June 14, 2016

now i'm going to have to create some workaround until this gets fixed !!!


Kelly_Conrad
Forum|alt.badge.img+17

Hey @tcandela! You should be able to run a policy with a run command of 'jamf policy -trigger enrollmentComplete' on a different trigger to get around this for now.


Forum|alt.badge.img+20
  • Author
  • Contributor
  • June 14, 2016

@Kelly.Conrad i'll give your suggestion a shot.

Also, looks like the Jamf binary uses -event instead of -trigger

for this mac that i just enrolled i did both of the following commands

sudo jamf policy -id ###
sudo jamf policy


Forum|alt.badge.img+18
  • Esteemed Contributor
  • June 15, 2016

I found this to be a problem with having it install packages on reboot checked in its configuration. My giant workaround was to make a new image that auto logged into a user and then turn off the auto login. (I used to do this years ago). Now it seems to be working pretty well with enrollment complete policies.

Gabe Shackney
Princeton Public Schools


Forum|alt.badge.img+10
  • Contributor
  • October 14, 2016

I am also experiencing this.

I have only one Policy that is triggered by Enrollment, once per computer.
It's payload is two .pkgs and one Script.
She is a JSS 9.93.1469132907.c hosted on JamfCloud and the client is Yosemite 10.10.5

In the Jamf log on the client machine I see:
Fri Oct 14 09:59:53 machine-name jamf[2744]: Checking for policies triggered by "enrollmentComplete" for user "bappity.boopity"...

I thought maybe I was being impatient so I waited it out for 5 hours.
Upon looking at Console, I see other policies triggered on Login, Logout, StartUp, NetworkChange and they have successfully run.
Then a whole bunch of re-occurring check-in since.
Afterwards, I ssh into the client mac and in Terminal jamf policy -trigger enrollmentComplete
Then, the above Policy runs successfully.

Just kicking in my experience.

w/ Luv & Flowers,
-me


AVmcclint
Forum|alt.badge.img+21
  • Esteemed Contributor
  • October 14, 2016

I don't know why this post didn't turn up in my searches. I think I'm having the same problem.

https://jamfnation.jamfsoftware.com/discussion.html?id=21640


Forum|alt.badge.img+10
  • Contributor
  • October 14, 2016

@AVmcclint

Me neither.. but good one. I will share my post on there as well.

Thank you,
-p


Forum|alt.badge.img+20
  • Author
  • Contributor
  • October 14, 2016

I am on 9.96 now, not sure if the enrollment trigger has been fixed in 9.96, haven't tried yet, does anyone know if 9.96 fixed this issue?

https://goo.gl/zTdvwT Still lists it as an open issue.


Forum|alt.badge.img+8
  • Contributor
  • February 10, 2017

@tcandela I'm still having issues getting "Enrollment Complete" policies to fire at imaging time. I'll need to follow up with the support team to figure out why, as we'd like to move to reliable thin provisioning with better control over policy triggers. Behavior has been inconsistent - it appears policy history isn't always getting flushed at imaging, and when flushed, enrollment policies don't always execute on trigger.

On the advice of our JAMF buddy, I've moved our "Enrollment Complete" policies to "recurring check-in" to run once per computer, and it's been a decent work-around. Still, if there's a fix, I'd love to resolve this, too..