Meraki

beks88 · ‎Nov 21 2019

It's not as much confusing as you think :). We have for different device use cases different SM networks/instances (name it how you like). The only thing you have to do is to assign the devices manually to the desired MDM (in this case network/instance).

beks88 · ‎Nov 20 2019

So my initial solution doesn't work for another device. Freshly installed Mac, VPP is device assigned and getting same error again. Some apps worked after multiple reinstall commands, some still answer with same error.

beks88 · ‎Nov 19 2019

OK, but what is meant with this point Use the certificates in the AnchorCerts property of the Profile to pin the host to the certificates. I apologize if I shall go to Apple with my questions, just trying to understand this.

beks88 · ‎Nov 17 2019

Yes, I noticed that it's not possible in SM, just wanted to know if I missed a setting in SM, if already someone tried the same and if it's on the roadmap of the developing team.

beks88 · ‎Nov 15 2019

I'm not talking about devices, I'm talking about accounts, which can be created in Apple School Manager and synced to Systems Manager or another MDM. Systems Manager f.e. syncs all available accounts from Apple School Manager. In jamfSCHOOL you can choose from which location to sync accounts. Expecting you have a school in location A and a school in location B. Both use the same School Manager but have two IT departments. Department A manages location A in Systems Manager and department B manages location B in jamfSCHOOL. As of current state, Systems Manager will have teacher and student accounts synced from location A and B.

beks88 · ‎Nov 15 2019

In addition to other MDMs, we are also testing Meraki as an option for Apple School Manager. Because of that, I would like to know if a location based sync with Apple School Manager accounts (Managed Apple IDs) is on the Meraki developers roadmap? Currently I haven't found an option and all available accounts get synced into Systems Manager. What issues can be expected if some accounts sync with two MDMs? Any experience so far?

beks88 · ‎Nov 14 2019

@Noah_Salzman Your understanding may be right, but I‘m still missing how to combine/fetch the DEP token and certificate since these are coming from Meraki, aren‘t they? I‘ve added the Apple docs link to my OP for the sale of simplicity

beks88 · ‎Nov 13 2019

Will wait a bit, maybe someone from Team Meraki replies on this 🙂

beks88 · ‎Nov 13 2019

Hi all, is there a more deeper docu to this topic? The Apple docs from the provided URL (see screenshot) are very rare. Is there a docu from Meraki? An example would be great. My understanding of this feature is, that we as Organisation do just a "styling". How do we link the DEP token to the url? Aren't the DEP token and certificate coming from Meraki? How to combine this url with the different authentication methods already activated in Meraki? Anyone already at work on this or you just ignore this, for me, awesome feature :D? Link to Apple docs

beks88 · ‎Nov 13 2019

I know it's an old thread, but I just experienced the same error on one machine and want to ad my solution to this thread for searching purposes. Solved the problem by reinstalling the SM client on the machine manually. I'm not sure if the client got corrupted by the last macOS update (10.15.1) but it looks like so, because installations worked fine before.

beks88 · ‎Nov 10 2019

@cmr I‘m talking about Systems Manager, can‘t reboot devices there. Had a case just a few days ago where it would been helpful.

beks88 · ‎Nov 10 2019

Yes I had it already in the same profile, same issue. I also think it has something to do with the order of profile installation, but I didn‘t managed to narrow it down. Only thing that worked fine was waiting for all profiles to be installed and then activate/install single app mode. I even don‘t think it has an alphabetical order, because I think I‘ve read somewhere In the Apple docs that the installations have to be asynchronous

beks88 · ‎Nov 9 2019

using iPhone and haven't found any setting regarding TouchID/FaceID, but good to know it works on Android 🙂

beks88 · ‎Nov 9 2019

I was very happy when I saw the App has an update to install. Since the SM is my main job, would be great to be able to send a restart device command through the app. For now I still have to use the browser :). Still hoping on getting TouchID/FaceID support for log in Kudo for getting more focus on the mobile app again

beks88 · ‎Nov 8 2019

@BlakeRichardson Will give it a try, the problem we face in this case, we need to hide the URL from the searchbar. That's why we use webclip in full screen view

beks88 · ‎Nov 7 2019

I've came across a strange behavior on iPads in Kiosk mode and need some brainstorming 🙂 Our customer has a few iPads. These are used to display a website for time tracking their employees. When restarting an iPad i have to remove the profile and install again it again. Otherwise the website opens in Safari and shows a blank page after a few seconds. Anyone came across this? The webclip payload itself is configured in a single profile and and another profile installs the single app mode payload configured with bundle ID com.apple.webapp.

beks88 · ‎Nov 5 2019

I already filed a wish, but maybe some one else will hang in :). It would be great to see which profiles are missing. If I missed something and this is already possible let me know. A "filter" like on the Apps section with "Installed" and "Missing" would be nice. Could help in some places on troubleshooting and double checking if the owner and device tags are set correctly for profile installations.

beks88 · ‎Oct 31 2019

But according to this info, I would need to allow modification, set the name through dashboard and disallow modification again. Or do you guys have a workflow to share? We would like to set device names to users username automatically 🙂 and they shouldn't be able to modify it.

beks88 · ‎Oct 23 2019

Try to enroll a device with a default user who has all groups attached in AD, then click sync AD groups.

beks88 · ‎Sep 26 2019

But is this still true? Haven't checked it "iOS devices enrolling through DEP currently do not support enrolling with Azure AD, OpenID, and Google Oauth enrollment authentication. They will fall back to Meraki managed authentication and require Meraki owner accounts to authenticate if your Systems Manager network is configured with one of these methods. Note that these three methods will also not provide any group tag metadata like local Active Directory integration will." Just in case his usecase involves DEP

beks88 · ‎Sep 26 2019

Kudoed to signal the importance 🙂

beks88 · ‎Sep 26 2019

But how will users be able to change their password if they come over DEP enrollment and SSP is disabled, just as an example 🙂

beks88 · ‎Sep 25 2019

Never used Free Meraki, but is Free Meraki getting updated to support the Apple Business Manager migration? Apple is discontinuing the old portals deploy.apple.com and vpp.itunes.apple.com. Could this affect Free Meraki because of the tokens?

beks88 · ‎Sep 25 2019

Maybe try to contact support or check the APIs. This is a big number of users

beks88 · ‎Sep 20 2019

Just recognized, the map is showing now a correct map and location and it does not zoom out to nirvana anymore. OSX 10.14.6 Safari 12.1.2 Anyone can confirm?

About beks88

beks88

Community Record

Badges