sudo touch /var/db/MDM_EnableDebug
In macOS 10.12 you can configure the logging subsystem via a configuration profile (as above) or by using the log utility like so:
sudo log config --subsystem com.apple.ManagedClient --mode="level:debug,persist:debug"
You will probably want to reset this back to normal so that debug logs are not persisted like so:
sudo log config --subsystem com.apple.ManagedClient --reset
Link:
https://mosen.github.io/profiledocs/troubleshooting/logging.html
Try this:
log show --style compact --predicate '(process CONTAINS "mdmclient")' --last 1d | grep "Unable to create MDM identity"
