cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

SOLVED
Highlighted
Here to help

NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Good evening all! 

 

My name is Chris and I am an IT Manager here in Columbia, SC. We have Meraki MDM implemented on a few phones and are looking to MDM all of our corporate phones. We are in the process of migrating carriers so we need to touch every phone in the company which creates a great opportunity to MDM the non-MDM company phones that we have currently, and/or deploy the new phones with MDM. My challenge seems to be setting up MDM fully while also restoring from an end-users iTunes backup. When restoring from an iTunes backup, the SM app has to be installed manually and the phone does not become fully supervised and the Meraki profile is removable. We want the transition to be as smooth as possible. Do you have any recommendations as to how we can achieve a restore that will maintain full supervision and hardening of the phones? If there is already a thread on this, I do apologize. I looked and did not see anything specific to this topic. Thank you all in advance for your insight. 

 

Best Regards,

Chris Murdaugh

1 ACCEPTED SOLUTION

Accepted Solutions
Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I believe where we landed on this was that if you are trying to bring a device from an unsupervised to a supervised state, restore from backup will not work at initial setup (either from itunes or icloud). Our recommended method would be to have your users sync any app data in icloud, and then login and re-download that app data from icloud once setup is complete (this can't be done in the "restore from backup" step in initial setup). I would probably suggest skipping that step (you can take it out of the setup process by selecting it in "skip steps" when applying DEP settings). 

 

Note - if you were *just* enrolling the device in DEP and not supervising it, it sounds like restore from backup would work at initial setup.

 

With regard to the wifi profile disappearing once it's enrolled - I believe what's happening is once you have configured the Meraki Management Profile (SM), any previous profiles will be removed. To configure a wifi profile with Systems Manager, you can set one up in the Systems Manager>Settings page. Here's more on that - https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Settings 

 

I'm not sure why you're not able to access user account settings - do you mean the user is no longer logged in (to icloud?) or that logging in to icloud is blocked? There is a restriction you can set to block this - in SM it is under Settings>Restrictions>Allow Modifying Account Settings. If this was unchecked, that would block a user from signing in to icloud. 

 

Hope this helps! 

 

68 REPLIES 68
Building a reputation

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

My experience is that to remain supervised through a restore, the device has to be in the Apple DEP program.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I don't think you can do this.

Building a reputation

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

And then if you're in the Apple VPP, you can purchase apps and assign them to the device once the device gets an internet connection.

 

I just finished setting up some iPads that are in the DEP and VPP so I power up the iPad, tell it what language and country i'm in, hook it up to wifi and the Meraki MDM does the rest, installing apps (you need to include the Meraki Systems Manager app in the VPP for this to work), arranging the apps on the screen, etc.

 

Thanks,

 

Mark

Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

We are in VPP and DEP. If we just wanted to deploy new phones without restoring from a backup, we would be all set. The problem seems to be when restoring from a backup of a device that is not in MDM. The goal is to retain our employees iPhone data on the phone to make the transition smoother. 

Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I really hope this isn't the case. I can see them coming with pitch forks and torches.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I don't believe you will be able to restore data from a personal account into a corporate controlled device - which uses a different account.  You are talking about phones being transitioned from being "personally" configured with a personal iTunes account to being corporate configured on a corporate iTunes account.

 

If you could just transfer things between accounts like this iTunes revenue would be in trouble.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

So, if you use Apple Configurator and you prompt enrollment that way and the user goes to restore from a backup, enrollment will be totally wiped and never hit the phone. The thing about DEP which is great is that supervision and the MDM profile become mandatory! Once your devices are in the DEP portal and assigned to Meraki go to the DEP section (in Meraki) and assign prestage settings. Here are mine (notice that supervision and the MDM profile are mandatory).

Screen Shot 2018-01-04 at 10.08.08 PM.png

 

 

 

 

 

 

 

 

 

*Note: You must assign settings before the device starts setup - if no, the settings will not be recived.

 

The user will navigate through prestage enrollment and the user will be prompted to restore from iCloud or an iTunes backup, allow them to do this... after that is completed they will be prompted with a "Remote Managment" screen and they will be asked to imput their AD credeintials (if you set that up) which will supervise, install the MDM profile, and install the Meraki app. *As @PhilipDAth you need to have VPP setup and the Meraki app scoped to the devices with auto install to have it pop down as managed.

iPhone-mdm-bypass-service.png

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Hope this helps,

Jared

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

If you are ever deploying Apple devices and are using an MDM, make sure you get VPP and DEP. They are great products and are FREE!

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Unless you have a Mac so you can run the Apple Configurator - the DEP program is horrible for small to medium sized business to deal with. It is fine for large volume purchases of Apple hardware.

 

On the whole, I recommend small to medium business use Android devices.  Cheaper.  More apps.  Easier to manage.  More options.  Usually no vendor lock in.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@PhilipDAth I agree in some cases. But, most of the users I deploy to are used to iOS and it is a reliable and good choice. With the new Apple Configurator you can enroll devices into DEP not even bought from Apple (with the 30 day period that they can be unenrolled by the user). Usually you don't even have to touch DEP if you just have it auto-assign to your server. 

 

 

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

You can if you have an Apple Mac - otherwise you can't really. A major limitation to use DEP.
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@PhilipDAth I'm confused about your concerns with DEP. We use it with Mac's and iOS devices without ever having them touch Apple Configurator. DEP is a bit of a pain to get the initial enrollment set up with Apple, but then it's very easy to use and implement through Meraki SM. 

MRCUR | CMNO #12
Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Unfortunately you cannot "restore from backup" using itunes/icloud when moving the device from one state to another (unsupervised to supervised, or outside of DEP to enrolled in DEP). If the device was not previously supervised or enrolled in DEP, the backup will reflect a different device state and cannot be used to "restore" on a new device state 😞

 

One thing we've seen folks do is ask users to backup any data they'd like to keep in icloud on a per-app basis. Upon setup, DEP settings will be applied to skip the "restore from" options - these cannot be used on initial setup.

 

Once setup is complete, users can then log in to icloud to re-download this data on a per-app basis. This is per-app data and not saved in a way that conflicts with the new device state. 

 

The biggest downfall I've seen from this method is losing data from those apps that cannot be backed up on a per-app basis in icloud - namely messages/texts. If it's critical that users keep their text history, there are other solutions for this! I've heard people like Touch Copy, for example.

 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@MRCUR I spent about three weeks trying to get an Apple Customer Number from Apple for one customer.  I'm never doing that again.  Apple is just too painful to deal with directly.

 

For the vast majority of other customers, who don't buy direct from Apple, you have to rely on your Apple reseller to get you DEP enrolled.  I've found about 50% of them say "What is DEP", and they are not willing or unable to process the DEP enrolment.

 

About 30% of them know about DEP, but you can spend 2 or 3 weeks waiting while they try and contact the right person inside of their companies to process them.

 

About 10% of them are completely DEP switched on, and can just do it.

 

 

It has gotten so bad that I now tag it out of jobs.  I tell the customer if they want to use DEP and Apple devices they have to take responsibility for arranging the DEP portion.

 

 

It has been a horrible horrible experience getting Apple devices DEP enrolled - a lot of different times.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@Melissa It is 100% possible to take an unsupervised backup and install it on a DEP device. I have taken 20+ unsupervised devices and switched them over to DEP with no loss in data. DEP forces the user to install the MDM profile after the backup is installed. Personally, Apple has never made it clear on how to do this and it makes system admins find it themselves.

 

 

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@PhilipDAth When I was setting of DEP I spoke directly with the buisness team at my Apple store. While the buisness number is great for support, the local team at your local Apple is the best.

 

It only took them 3 days to get us all setup with VPP and DEP. I just feel there is a lot of mis-conceptions about Apple in the enterprise. 

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Maybe Apple are better to deal with in your country.  Like I said, I have had so many bad experiences I don't want to do another DEP configuration again.

Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Maybe I misread this - I thought in this case we were moving from an unsupervised enrolled device (not in DEP) to a supervised device in DEP. Is that not right?

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I believe that is there goal. That is possible, if the device is in DEP and unsupervised backup can be used. This method does work in Apple Configurator.

Find this helpful? Click the kudos button. Thanks!
Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@jared_f Are you saying you've been able to use Apple Configurator to take an unsupervised, un-enrolled (in DEP) device and enroll it into SM and DEP with supervised DEP settings applied, while allowing "restore from backup" in the initial setup? 

 

The main hurdle would be moving from unsupervised to supervised while allowing "restore from backup". 

 

Please let me know what your experience has been!!

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I took some of my unsupervised devices that were not in my DEP and added them to DEP with the new Apple Configurator. Any DEP device can be restored from an unsupervised or supervised backup (iCloud or iTunes) because DEP pushes the enrollment payload after the restore wizard.

 

This cannot be done if you are just using Apple Configurator to add supervision. Device must be enrolled in DEP and have prestage enrollment setup in Meraki in order to complete this.

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

This matches what I've seen with iOS @jared_f. As long as you have the device entered in DEP and have settings assigned through Dashboard, DEP enrollment will properly happen even after you restore from a backup that was not previously DEP/supervised. 

 

I will note that this does NOT work for Mac's. If you have a Mac that's enrolled in DEP and then you restore an image of that Mac to another Mac that has DEP settings assigned, the second Mac will not be enrolled in DEP. 

MRCUR | CMNO #12
Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Right, so in this case, if @CMurdaugh would like to supervise these devices, restore from backup cannot be used. If it's not the goal to supervise them - just to add them to DEP...the Apple Configurator + restore from backup method should work! 

 

 

 

 

 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Depending on what method they use, if it involves touching the device, take the time to setup DEP. If the phone ever gets wiped, it won't require enrollment to happen again.

Find this helpful? Click the kudos button. Thanks!
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Hi all,

i've read the comments and i'm in the same boat as the OP (i think).

I need to supervise/enroll 150 devices that are already in service. None of them are in DEP yet, but that framework is all setup and ready to go (along with Apple Conf 2.6.2).

Still unsure about best practice for doing this, so continued replies would be appreciated. 🙂

 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@Jacko Do you need to restore the existing data or not? Either way, you need to get the devices into DEP on the Apple side and then assign settings to them in Dashboard. 

 

Once you've done this, you can wipe each device and it will become supervised and get the DEP profile during the setup process. If you want to restore data from iCloud or iTunes you can do that as well - just pick the appropriate option on the restore screen. 

MRCUR | CMNO #12
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Well, i'm struggling at simply getting the DEP profile onto freshly wiped ios devices, even though they are in Apple's DEP and [obviously] Meraki > DEP.

 

There has been conflicting info about whether pre-supervised devices can be DEP supervised then restored as the theory is that the backup state was unsupervised so that is what would be put back on the device.

 

Think the jury is still out on that isn't it?

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@Jacko DEP happens *after* the restore process in the iOS setup. This means you can take a device in any state, wipe it, restore from backup and have DEP applied. 

 

Are you sure you've applied DEP settings in Dashboard to the devices? Does DEP happen if you don't do a restore? 

MRCUR | CMNO #12
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Ok what's confused me is that, it does restore but doesn't add the wifi SSID that i assigned in the Apple Config profile.

So, ok it restores, i have to go through some of the necessary steps to get to the "remote management' screen, which is then where it grabs the DEP profile and then subsequently according to what tags are assigned to the device in Meraki dashboard it will then assign a 'settings' profile which can be updated and rolled out whithout rebooting/wiping.

 

Am i correct so far?

If so, then how do you make a touchless deployment whereby it adds the wifi SSID so you don't have to. Is that only done in Apple Configurator?

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@Jacko Yes, I believe you're required to use Apple Configurator to do a touchless deployment. @jared_f probably has a better handle on that than I do as we simply use an open "enrollment" SSID when setting up iOS devices. 

MRCUR | CMNO #12
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Thanks, that may not be such an issue i guess.

Just trying to automate the process as much as possible.

One thing i've found is that after a supervised enrolment i cannot access users account settings on iphone or ipad. i cant see in the profiles where that area is allowed/disallowed.

If disallowed then the devices surely can't back up to icloud?

Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I believe where we landed on this was that if you are trying to bring a device from an unsupervised to a supervised state, restore from backup will not work at initial setup (either from itunes or icloud). Our recommended method would be to have your users sync any app data in icloud, and then login and re-download that app data from icloud once setup is complete (this can't be done in the "restore from backup" step in initial setup). I would probably suggest skipping that step (you can take it out of the setup process by selecting it in "skip steps" when applying DEP settings). 

 

Note - if you were *just* enrolling the device in DEP and not supervising it, it sounds like restore from backup would work at initial setup.

 

With regard to the wifi profile disappearing once it's enrolled - I believe what's happening is once you have configured the Meraki Management Profile (SM), any previous profiles will be removed. To configure a wifi profile with Systems Manager, you can set one up in the Systems Manager>Settings page. Here's more on that - https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Settings 

 

I'm not sure why you're not able to access user account settings - do you mean the user is no longer logged in (to icloud?) or that logging in to icloud is blocked? There is a restriction you can set to block this - in SM it is under Settings>Restrictions>Allow Modifying Account Settings. If this was unchecked, that would block a user from signing in to icloud. 

 

Hope this helps! 

 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Hi All!

 

Restoring from a backup is possible with DEP devices. During DEP the device becomes managed and supervised no matter what. Please have your users make a backup, add the device to DEP with Apple Configrator 2, and assign DEP settings within Meeaki before the user starts setup.

 

I plan on writing a guide and doing a video walk through if possible to clear this matter up!

 

jared

Find this helpful? Click the kudos button. Thanks!
Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Good point - once the device is supervised, restore from backup will work in the future on that device. The issue is restoring from backup when the backup was made on an unsupervised device (when trying to move to a supervised state).

 

 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Hi Everyone,

 

I put together a quick guide on this topic. The TabPilot video in the guide is really great and covers the basics of configuring DEP to allow you to enroll devices not bought from Apple, watch it first. Please excuse any typos, I did this in a tad of a rush - but there seems to be a little confusion and hesitation and I thought this would be a good idea to throw out there.

 

Here is the guide: https://drive.google.com/file/d/1tg-o2PYgmEL7qUkPLAQQuQ-T5QZZ7I6q/view?usp=sharing 

 

As noted in guide, please don't hesitate to reach out if you have any questions for me!

 

Have a great weekend!

Jared

Find this helpful? Click the kudos button. Thanks!
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Good afternoon! I apologize for my absence from this post. Melissa hit this right on the head. I have had a couple of conversations with Meraki about this and since we are changing the supervised state of the phone, it is recommended to do an "iCloud Sync" and not restore from a backup. Using this method you do lose iMessages (text), phone call data, voicemail, installed apps, and songs not purchased through iTunes. You do maintain contacts, photos, and app data so long as it is stored in iCloud. Users can verify that there data is in iCloud by going to iCloud.com. I have went through about 14 phones so far with no issues or complaints. For the users that don't participate in iCloud, they weren't concerned that they received a fresh slate. We also made sure to prime everyone weekly before transitioning to the new phones by sending emails with information about the transition and as well as how to back up the data for themselves. Apple has many excellent KBs for saving your data. Having the phones in a supervised state is really important. I don't know why you wouldn't want to supervise a fleet of phones just due to the fact that you can't disable the iCloud Activation lock on the phones if the previous user doesn't log out of iCloud entirely. This was one of the main reasons we chose to implement Meraki System Manager MDM. With all of that said, I really appreciate everyone's participation in this thread and hope that it helps others out along the way. Have a great weekend everyone! 

 

Best Regards,

Chris Murdaugh

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@jared_f why don't you do a YouTube video of the process so people can see before and after and the whole process ... 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I can assure you that if you backup to iCloud meraki will come down on the device.  I will make a video walk through to show this. 

Find this helpful? Click the kudos button. Thanks!
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

I don't doubt that. Just curious if the device will be supervised and the profile non-removable. Especially when the backup is taken from a non-supervised phone. The more information everyone can present here, the better off we will all be. Thank you all for your contributions.

 

Chris

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@CMurdaugh Yes it will. While I don't disagree with the fact that users can just "sync" their information to iCloud a lot of people like having the apps download and having text restored. 

 

The Device Enrollment Programs purpose is to force managmement, lock profiles, and supervise devices. Apple has built an intended fail safe that if a user selects and unsupervised backup the device will become supervised by any means possible

 

So yes! A user can restored an unsupervised backup on an iPad if the following pre-requistes are met:

-Device was added to DEP (Apple Configurator, Purchase # from Apple, Etc.)

-Device was assigned to your Meraki MDM Server

-Enrollment settings are pushed from the Meraki dashboard before the user begins setup.

 

It really makes no sense and would defeat the reason Apple created this program if a user could just select an unsupervised backup and get around DEP (supervision, profile being mandatory.)

 

 

 

Find this helpful? Click the kudos button. Thanks!
Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Fantastic! Maybe we can all learn from your video. Thanks Jared. 

 

Chris

Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@Melissa,

This seems to be my experience as well, although my experience is limited.  Here is my scenario:

 

I had an iPhone 6s that was unsupervised and unmanaged.  I backed up to iCloud.

My new iPhone 8 was enrolled in DEP and assigned to Meraki with a Supervised/Mandatory profile.  In going through initial setup on the new phone, I chose restore from iCloud.  After completing setup, the device was not supervised or managed, and I never received any screen that would indicate anything was coming in from DEP.  So, I did a few experiments.

 

1.  Updated iOS on the phone, wiped the phone (it kept the iOS update) and tried the restore again.  Didn't make any difference.

2.  Ran through the setup on the iPhone 8 without a restore.  Phone was Supervised and enrolled and Meraki app pushed as it should have been.

3.  Wiped the phone and tried with the restore again.  Still no go.

4.  Restored the same backup to a DEP Supervised/Mandatory iPhone 6S instead of the new iPhone 8.  This WORKED!

5.  Backed up from this now Supervised iPhone 6s to iCloud.

6.  Restored from this supervised backup to the new iPhone 8.  This worked.

 

I'm thinking something new was introduced with iPhone 8 that prevents the DEP push when restoring from an unsupervised device.

 

If someone else has the equipment to try the same experiment, I would love to see if my scenario can be duplicated.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@CherylA That may be the case. Seems to be working fine with the iPads. I believe we should open a support case with Apple. It is very problematic if what you are saying is true.

Find this helpful? Click the kudos button. Thanks!
Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

It looks like there is a patch for this.

Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@jared_f, @Melissa

 

Just to be thorough, I tried the same steps with a backup and restore via iTunes instead of iCloud, and ended up with the same results.  Restore of unsupervised phone to the iPhone 8 ended up not being supervised.

Here to help

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@PhilipDAth Your "patch" link just goes to the android open source website.  No relevance to Apple iOS / DEP.

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

It was making a wry joke.

Meraki Employee

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

Thank you so much for sharing your experience! That's really interesting that you were able to restore from (and unsupervised) backup to an iphone 6s and have supervision persist. It sounds like you're right about the iphone 8 maybe having a restriction built in. I'll see what I can find out about that!

 

 

I love the thorough analysis 🙂 I wouldn't have thought to mix models!! 

 

To be clear - once the device is supervised, you should be able to use the "restore from backup" feature in future wipes/factory reset and have that supervision persist on the device. It's just an issue when first applying supervision to a device that's already out in the field/being used. 

 

 

Kind of a big deal

Re: NEW Meraki MDM Deployment - iTunes and iCloud Restorations Required

@CherylA I reached out to another community of Apple admins about your issue and I am going to see if anyone lets me know they are seeing the same thing. Just to make sure, did you go into Meraki and verify settings were assigned under DEP for that device that forced supervsion and made MDM mandatory?

 

 

 

Find this helpful? Click the kudos button. Thanks!
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels