MDM Logs

While recently troubleshooting an issue with DEP enrollment initiation, I was given instructions on how to enable and capture mdm logs on new device during the Setup Assistant process. Networked machines would intermittently display the enrollment prompt at the Setup Assistant. The resultant logs from these steps should help you determine the source of DEP enrollment failure, network or otherwise. Steps to configure mdm logging: You will need a new or freshly imaged Macbook to test with. [Read More]

MacOS Onboarding Splash Screen

Inspired by the JNUC talk presented by James Smith last year, I set out to improve our current user onboarding experience. Currently we use DEP and custom scoping to trigger JAMF enrollment policies. This lead to a few issues as the policy triggers are contingent on manual steps being executed. As we know, anytime we introduce manual processes we open the door for mistakes and inaccuracies. Also, Luckily, we can leverage the @enrollment JAMF trigger to kick off onboarding policies and serve up a splash screen to give users feedback during the initial setup. [Read More]

Single Click MacOS Reimaging

With MacOS 10.13.4 came the addition of the -eraseinstall flag for the MacOS installer. Note that the following guide only pertains to machines on MacOS 10.13.4 or newer. This flag allows us to mimic the Erase all content and settings option from iOS, saving us from having to reimage via Internet Recovery or a boot image, target disk mode, etc. So first thing we need to do is ensure that all machines have the full MacOS High Sierra installer cached. [Read More]