Requested user is not a administrator. Allow the user to administer this computer in System Preferences to continue.

[Wooster101]

Hello and thanks for your excellent work with this script!

I have troubles making this script work on M1 Macs

I run the script from jamf in a policy from Self Service. The full-screen jamfHelper comes up for a minute and then goes away.

In the beginning of the logging I get that the user is an admin and owner of the volume - later on I get the user is not an admin (it still is)

Log below:

Script result: 
[erase-install] v0.19.0 script execution started: Mon Apr 12 15:08:09 CEST 2021
[erase-install] Caffeinating this script (pid=17285)
45000000
[free_space_check] OK - 180356512 KB free disk space detected
[erase-install] Looking for existing installer
[find_existing_installer] Installer sparse image found at /Library/Management/erase-install/Install_macOS_11.2.3-20D91.sparseimage.
/dev/disk4          	GUID_partition_scheme          	
/dev/disk4s1        	EFI                            	
/dev/disk4s2        	Apple_HFS                      	/Volumes/Install_macOS_11.2.3-20D91
   [check_installer_is_valid] Checking validity of /Volumes/Install_macOS_11.2.3-20D91/Applications/Install macOS Big Sur.app.
Volume Shared Support on disk5s2 force-unmounted
[check_installer_is_valid] Using Build value from com_apple_MobileAsset_MacSoftwareUpdate.xml
Volume Shared Support on disk5s2 force-unmounted
[check_installer_is_valid] Installer: 20D91 ; System: 20D91 : valid build.
yes user.test is a member of staff 
yes user.test is a member of admin 
[get_user_details] user.test is a Volume Owner 
[check_password] Success: the password entered is the correct login password for user.test. 
[erase-install] WARNING! Running /Volumes/Install_macOS_11.2.3-20D91/Applications/Install macOS Big Sur.app with eraseinstall option 
[erase-install] Opening jamfHelper full screen message (language=en) 
[get_user_details] updating preboot files (takes a few seconds)... 
By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms. If you do not agree, press CTRL-C and cancel this process immediately. 
Requested user is not a administrator. Allow the user to administer this computer in System Preferences to continue.
[erase-install] 'Self Service' ended
[erase-install] 'jamfHelper' ended
/Library/Application Support/JAMF/tmp/ZZZZ TEST ZZZZ - Erase-Install macOS: line 148: 17487 Terminated: 15          "$jamfHelper" -windowType $window_type -title "${!dialog_erase_title}" -heading "${!dialog_erase_title}" -description "${!dialog_erase_desc}" -icon "$dialog_erase_icon"
 [erase-install] 'caffeinate' ended

have you got any ideas what I can try next?

Best regards
Holger

[grahampugh]

@Wooster101 How did you create user.test?

Please can you try the following:

1. ls /System/Volumes/Preboot
2. There should be a folder with a name like a UUID e.g. ACF62396-59F0-4234-9038-33493694F231 in my case.
3. defaults read /System/Volumes/Preboot/[name of folder]/var/db/AdminUserRecoveryInfo.plist

Is user.test listed in this file? If not, what is the entry for this user in defaults read /System/Volumes/Preboot/[name of folder]/var/db/AllUsersInfo.plist?

[Wooster101]

I have now re-enrolled the computer and the status is the same as before

After DEP enroll the admin created at Setup Assistant and the hidden admin (created by Jamf) are admins I every aspect except for not being flagged as admins in AllUsersInfo.plist and the file AdminUserRecoveryInfo.plist is an empty Apple plist

Creating a local admin (aa) thru System Preferences will after running updatePreboot populate the file AdminUserRecoveryInfo.plist and is flagged as an admin in AllUsersInfo.plist

I also created a local admin (bb) thru sysadminctl -addUser and that user is also listed as admin everywhere and is a Volume Owner (same as the user (aa) created in GUI)

I have created all the files Apple are asking for in their feedback system.

[Wooster101]

Here is the Apple FB number: FB9078997

[grahampugh]

Thanks, I've passed on the FB to the contact at Apple.

[Wooster101]

Hello,

Have you heard anything about this? I have had no response from Apple to my ticket yet.

[grahampugh]

Unfortunately not.

[Wooster101]

Hello,

I see that the script is updated. I have not tried this new version. I suspect that it will not affect the missing admins in "AdminUserRecoveryInfo.plist"

I have not heard back from Apple regarding this. I have "poked" them again today.

[Wooster101]

Hello again,

I have tried the last version of the script now (0.20.1) and the Erase and Install have worked 3 times on the same computer that was failing before.

The Mac I test with is a MBA M1 and now have macOS 11.3.1 installed. It is the same computer I have tried with all the time but it had macOS 11.2.3 the last time I tried with version 0.19.0.

Just wanted to get back with my results :)

[grahampugh]

Good to hear! Thanks for the report.

[MikePattie]

Hey guys,

Im having this issue using the latest version of the script (26.1). Trying to update from macOS 11.6.7 to macOS 12.4.....Any updated ideas or fixes? I saw that it worked for Wooster101 on script version 0.20.1 and just wondering if this has been an ongoing issue throughout the versions?

Thanks!

[grahampugh]

Please take a look at https://github.com/grahampugh/erase-install/wiki/FAQs#the-installer-downloads-but-then-something-fails-why