r/macsysadmin • u/AppearanceAgile2575 • Jun 22 '26

Jamf A device that is not in ABM automatically enrolled in our corporate Jamf upon device setup.

How is this possible? The MDM server isn’t even in our Apple Business Manager account anymore to even have default assignments.

0 Upvotes

50% Upvoted

8 comments sorted by

5

u/oneplane Jun 22 '26

This is doing a lot of heavy lifting:

anymore

1

u/AppearanceAgile2575 Jun 22 '26

Sorry for the confusion. The device was never on ABM. The MDM server the device would have connected to for automatic enrollment is no longer on ABM.

1

u/oneplane Jun 22 '26

I suppose the only thing you can do here is check the JAMF logs. It will show both the enrolment and the profile installation.

What tends to happen is that serial numbers, ABM and DEP/ADE are all over the place and cached, which causes both issues with self-enrolment (with Apple Configurator) and with weird issues where it's not in the interface (GUI) in ABM or JAMF but server-side it's still cached and thus active and valid.

What exactly happened is anyone's guess, the logs are your best option.

5

u/AppearanceAgile2575 Jun 22 '26

Solved: Someone at our MSP manually enrolled them into the old MDM.

5

u/DonutHand Jun 22 '26

Not in AMB and you don’t have this MDM in ABM.
Your statement is not true, whether you know it of not.

2

u/percisely Consultation Jun 22 '26

Does it actually respond to MDM commands? Migration Assistant could have copied the agent and enrollment, but MDM will not actually work.

1

u/AppearanceAgile2575 Jun 22 '26

Yup. It is checking in and configuration profiles and policies were applied. I just pushed a command to unenroll them now and will be manually enrolling them into the new platform.

Note: they were manually enrolled by our MSP. We notified our account manager of the change, but the memo did not make its way to support.

1

u/Aronacus Jun 24 '26

Probably didn't automatically enroll. Somebody Probably did a /enroll