Changing ADE Enrollment Profiles

[kmiscoe]

Hello! I am currently working on changing the majority of OSX devices in my System Manager from an existing, old Enrollment Profile to a new Enrollment Profile. At the devices I am running "sudo profiles renew -type enrollment", but maybe 20% of the time it is failing to update the profile despite getting the notification popping up prompting that a new profile is available, and entering end user password to authorize the installation. Does anyone have a sure fire way of ensuring Enrollment Profile change, or why it might not be getting installed despite the prompt and authorization from the end user to make the changes? Thanks

[Arthur Dent]

I have found

sudo profiles renew -type enrollment

To be very hit and miss. The only things you can check is:

1. The device is assigned an MDM server in ADE

2. The device is assigned a network and ADE profile, that's valid, in SM

Lastly, it's very picky with demanding that the command be run in the same user account that enrolled the device.

[PriscillaX]

Hi @kmiscoe , did @Arthur Dent response help you answer your question? How are you checking if the new Enrollment profile is not being installed properly? That being said, we recommend creating a case and adding your dashboard link so one of our SM engineers can further investigate the source of the issue.

Please let us know if this information helps.

[kmiscoe]

I found

sudo profiles renew -type enrollment

works, but is somewhat lethargic. It gets there... eventually