Managed Profile Keeps Failing Install

[Mattcb]

Hello,

First off forgive me for my lack of understanding, I am new to Jamf and I just got thrown into the middle of it haha.

I am enrolling a new Ipad and it is enrolled in ASM and Jamf, but when it goes to install the managed profiles, two of them fail to install. It does not give any info other then that the status is failed.

Is there a way to see while they are failing?

Thanks,

Matt.

[mvu]

What are you pushing? What do you have for scope? All devices and all users, or just all users?

[GregBobbett]

One thing to check is to be sure you're not pushing the same types of profiles twice. As in don't try to push restrictions in both profiles or anything that might be opposed to each other in the profiles. If you can give a list of what those profiles are attempting to push, we might be able to point out the conflict. 

I'm with you on the lack of explanatory error messages. Took me a while to figure one very similar to yours out. 

[Mattcb]

Thanks for the replies. 

Basically what I am trying to push is student profiles, student restrictions, setting, etc. I am only having this issue on a single new Ipad (a replacement for a broken one.) I did finally get all the profiles to install finally (not sure how lol.) But for some reason it gives the student Ipad the option to leave the remote management.

[mschlosser]

regarding the ability ot leave management, you may way to check your prestage enrollment settings; and make sure that Make MDM Profile Mandatory is checked and Prevent Unenrollment is also checked. I'd also recommend that you turn on Prevent User from enabling Activation Lock is checked. hope that helps. As far as the profiles failing to install. check your scope, also make sure that you are install them at device level and not user level. also check your scope. hope that helps. After the prestage is modified, you may not re enroll the devices to see changes. 

[Mattcb]

I will look into this. I am not sure exactly where these are haha, but I will figure it out.

The profiles are being installed at the device level and users are prevented from enabling activation lock.

Thank you,

Matt.