Forcing a DDM sync on a Jamf Pro-managed device via the Jamf Pro API
文章介绍了如何通过 Jamf Pro API 强制同步 Declarative Device Management (DDM) 状态。 Jamf Pro 10.48.0 版本更改了空白推送命令的行为,改为发送 DeclarativeManagement MDM 命令以触发 DDM 状态报告和 APNS 检查。文章详细说明了使用 declarative-device-management 端点、获取客户端管理 ID 以及调用 API 的步骤,并指出同步后结果会显示在设备管理历史中。 2025-5-14 12:28:59 Author: derflounder.wordpress.com(查看原文) 阅读量:9 收藏

Home > Declarative Device Management, Jamf Pro, Jamf Pro API, Mobile Device Management > Forcing a DDM sync on a Jamf Pro-managed device via the Jamf Pro API

Forcing a DDM sync on a Jamf Pro-managed device via the Jamf Pro API

As part of Jamf Pro 10.48.0, Jamf changed the behavior of the Send Blank Push MDM command to send a DeclarativeManagementRequest MDM command (aka DeclarativeManagement) in place of the previous blank push MDM command, which was a blank push notification via APNS to the device to prompt the device to check in the Apple Push Notification Service (APNS). Changing the behavior to now send a DeclarativeManagement MDM command allows a DDM status report to be sent to the MDM server along with the APNS check-in.

However, I’ve observed that sending a blank push command does not always cause a DeclarativeManagement command to be queued up for Jamf Pro-managed devices if a previous DeclarativeManagement command was recently sent. If you want to make sure a DeclarativeManagement MDM command is being sent to your Jamf Pro-managed device, the declarative-device-management endpoint for the Jamf Pro API can be used to force a DDM status report to be sent to your Jamf Pro server. For more details, please see below the jump.

The declarative-device-management endpoint uses what’s referred to as the client management ID to identify the managed device in question. The client management ID is included as part of the computer inventory record. If you have the Jamf Pro ID of the Mac in question, you can get the client management ID using the following API command:


That should produce output which looks similar to this, where the output is the client management ID:


Once you have the client management ID, you should be able to use it to force a DDM sync and cause a DeclarativeManagement MDM command to be sent to your managed device:


Once sent, the DeclarativeManagement MDM command should appear in the device’s inventory record as part of the management history.

Once the device has sent in an updated DDM status report, you can also use the Jamf Pro API to query the status report’s information. For more information about doing that, please see the link shown below for a previous post on this topic:

https://derflounder.wordpress.com/2025/03/27/using-the-jamf-pro-api-to-query-ddm-status-information-for-macos/


文章来源: https://derflounder.wordpress.com/2025/05/14/forcing-a-ddm-sync-on-a-jamf-pro-managed-device-via-the-jamf-pro-api/
如有侵权请联系:admin#unsafe.sh