topic Re: Changing ADE Enrollment Profiles in Endpoint Security

Changing ADE Enrollment Profiles

kmiscoe — Wed, 05 Mar 2025 20:00:30 GMT

Hello! I am currently working on changing the majority of OSX devices in my System Manager from an existing, old Enrollment Profile to a new Enrollment Profile. At the devices I am running "sudo profiles renew -type enrollment", but maybe 20% of the time it is failing to update the profile despite getting the notification popping up prompting that a new profile is available, and entering end user password to authorize the installation. Does anyone have a sure fire way of ensuring Enrollment Profile change, or why it might not be getting installed despite the prompt and authorization from the end user to make the changes? Thanks

Re: Changing ADE Enrollment Profiles

Arthur Dent — Wed, 12 Mar 2025 15:33:46 GMT

I have found

sudo profiles renew -type enrollment

To be very hit and miss. The only things you can check is:

1. The device is assigned an MDM server in ADE

2. The device is assigned a network and ADE profile, that's valid, in SM

Lastly, it's very picky with demanding that the command be run in the same user account that enrolled the device.

Re: Changing ADE Enrollment Profiles

PriscillaX — Wed, 26 Mar 2025 14:45:03 GMT

Hi @kmiscoe , did @Arthur Dent response help you answer your question? How are you checking if the new Enrollment profile is not being installed properly? That being said, we recommend creating a case and adding your dashboard link so one of our SM engineers can further investigate the source of the issue.

Please let us know if this information helps.

Re: Changing ADE Enrollment Profiles

kmiscoe — Thu, 10 Apr 2025 15:17:02 GMT

I found

sudo profiles renew -type enrollment

works, but is somewhat lethargic. It gets there... eventually