Upon next login Enrollment user is deleted via policyĪfter writing it all out it sounds like a super complex process but it really isn't.Script disables auto login for enrollment user.Script runs custom trigger to fire the 'Enrollment Script' policy.Script launches Octory (Enrollment SplashScreen) in full screen mode Are you trying to erase a USB drive on your mac but getting this error as soon as you insert it That might be because the disk is a Windows/Linux bootable.Once logged in a script is run via LaunchAgent.This ensures the Mac is auto-logged in as the enrollment account.After all of our 'Enrollment' policies are applied the final policy with the 'Enrollment' trigger is a reboot policy.We name the policies with numbers prepended so the policies apply in sequential order.This has to be done after the local account is created (of course).Grant SecureToken to local admin policy via 'Enrollment' Trigger.This account is our standard local admin used for troubleshooting.

Create local admin account policy via 'Enrollment' Trigger.Deploy a package containing script to enable auto-login.Configure 'Auto-Login' for the Enrollment user.After Mac has been configured it is then deleted via a Jamf Policy.This account is only used for the enrollment/configuration process.Create a local administrator account before the Setup Assistant.Prestage Enrollment 'Account Settings' Payload.Sysadminctl -adminUser '' -adminPassword 'accountThatNeedsTokenPassword' -secureTokenOn 'adminAccountThatHasToken' -password ' adminAccountThatHasTokenPassword' The slider in turned ok on the card, but the properties of it keep saying 'read-only' permission. I suppose I could save a couple steps by just using our standard local admin for the enrollment process, but I'm hoping to use this account for future enrollment workflows as well. The SD Card can be read, but can not be formatted or have any files deleted or inserted. It's just the grant secure token command line. Script isn't anything extravagant honestly.

Erase process has failed mac