/usr/libexec/mdmclient dep nag does not nag if user has doNotDisturb enabled

Originator:eriknicolasgomez
Number:rdar://35571322 Date Originated:11/15/2017
Status:Open Resolved:No
Product:macOS Product Version:10.X
Classification:Serious Bug Reproducible:Always
 
Area:
Something not on this list

Summary:
When attempting to use mdmclient dep nag, we have discovered that if a user has doNotDisturb turned on, they will never receive a dep nag.

Given that this will be a critical method to get devices properly enrolled in MDM for 10.13.2, this should corrected.

Steps to Reproduce:
1. Assign a DEP profile to a machine (10.11, 10.12, 10.13)
2. Turn on doNotDisturb
3. run /usr/libexec/mdmclient dep nag
4. No nag
5. Turn off doNotDisturb
6. re-run /usr/libexec/mdmclient dep nag
7. nag


Expected Results:
User should receive a dep nag.

Actual Results:
User does not receive a dep nag.

Version/Build:
Tested on 10.12.6 and 10.13.1

This impacts 2,000 devices.

Comments

profiles -N is also impacted by this.

By eriknicolasgomez at Nov. 15, 2017, 10:43 p.m. (reply...)

Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!