Device Type / OS detection is not working

[JordanCN]

My site is all Meraki access points, switches, and security appliances.  I have another MDM solution in place so I am not using Meraki's solution.

I wanted to setup some stricter access policies on my corporate wireless and restrict it to only Windows based devices, but the Device Type/OS detection is not effective at all.  It only seems to correctly identify 20% of my devices as some form of Windows.  The vast majority are detected as "other".

Is there something I need to enable on the cloud console or on the Windows client so the OS can be detected is this feature something that requires the Meraki MDM client installed?

[PhilipDAth · Accepted solution]

This is not a good feature, as you have discovered, and your experience is typical.

What it does is passively watch the traffic (such as DHCP and HTTP requests) for hints as to what kind of device it is.  Once it gets enough hints then it can assign it a device type.

It is not going to instantly determine a device type on connection.

[cmr]

@JordanCN are your Windows devices in a domain?  You can use that to authenticate them.

[JordanCN]

Hi cmr,

Yes, I am in a Windows domain.  I am using Windows Network Policy Server to validate the clients and have my RADIUS options setup in the console.  I followed Meraki's suggesting on setting up NPS to validate users so this works very well for the computers, but they seem to be able to connect their Mobile devices to the secured wireless by entering their company username and password.

I thought I would add Domain Computers to the access policy and remove the users, but this only allows the computer to connect to the network.  Once the user logs on, they are disconnected.  Having both my Wireless User and Domain Computer groups in the policy treats this as an "OR" so the computer OR user can connect to the wireless.  There does not seem to be a way in NPS to specify the computer AND user are required.