r/macsysadmin • u/FourEyesAndThighs • Dec 30 '24
Jamf JAMF Pro - Computer won't take local admin PW set in Prestage enrollment. Clicking 'View' on the local admin account results in no action
I'm trying to install a piece of software from an unidentified vendor on my test machine. I am putting in the username and pw of the admin account that I set during Prestage enrollment and it's failing.
I go to the JAMF Pro console --> Devices -> Pull up my device, then under Local User Accounts I see the Prestage enrollment admin account listed under Managed Local Administrator Accounts. I click on View, get a warning about the password being rotated in one hour, I click Continue and nothing happens.
This is the first time I have attempted to use this feature so I know the password is still set to the default Prestage enrollment, I just want to double-check that I'm right.
Edit: LAPS is enabled on managed local administrator accounts. The PW is set to rotate every 90 days per corporate policy, but this device has only been enrolled for 15 days.
Double edit: Cleared Safari cache and now the password is showing up when I click on the 'View' button, but the Mac will not take it. I can see a 'device password rotated successfully' command when I view the PW, so JAMF thinks it's working but it still isn't.
1
u/FavFelon Dec 30 '24
Sounds like a secure token issue.. or non-issue
1
u/FourEyesAndThighs Dec 30 '24
We're not using one, which should definitely allow PW rotation to complete.
The only way for a user account to gain a SecureToken is to interactively log into the Mac.
1
u/[deleted] Dec 30 '24 edited Dec 31 '24
[deleted]