Meraki Systems Manager has added many new exciting features for macOS deployments including:    In Dashboard, "Device Enrollment Program" or "DEP" have been rebranded to "Automated Device Enrollment" or "ADE". This is so SM can stay current with the latest branding alignment with Apple. https://support.apple.com/en-us/HT204142  New ADE assign settings interface with additional features   Configure local accounts on macOS! Administrator and Standard user accounts Dynamically pre-fill macOS accounts from the SM 'Owner' set in Dashboard   Provisioning package support during macOS initial setup  Add a signed .pkg to run on all devices during initial setup!    Apple Silicon improvements  Bootstrap token automatically escrowed for new enrollments Added security for MDM commands (e.g. OSUpdates and Kernel extensions) on Apple Silicon Macs.     SM Agent 3.5.0+ is now natively built for Apple Silicon. No longer need Rosetta 2 to run SM agent!   Updated documentation with more information: https://documentation.meraki.com/SM/Device_Enrollment/Apple_Automated_Device_Enrollment_(ADE)    Thank you to all the users who have requested these features, we hear you! We're continuing to shape up new improvements for device deployments, so please continue to send in feature requests as our product and engineering teams review every request.  ... View more

In the Systems Manager > Settings page, administrators can now find a new BitLocker profile payload. Simply search for "BitLocker" or look for the "Windows" profiles to find it. Documentation can be found here.    This new BitLocker profile allows setting BitLocker encryption enforcement rules with various settings, such as: Encryption method OS drive settings PIN length Recovery options Fixed data drive settings Removable data drive settings Administrators can also check for encryption as a Systems Manager security policy, to obtain a list of compliant and non compliant encrypted devices on the Systems Manager > Devices list in bulk. This will show the encryption compliance status, reason, and if BitLocker is currently enabled, disabled, or unknown (not reported yet). This security policy will also check all other OSes for encryption, such as macOS FileVault encryption, iOS encryption, and Android Work Profile encryption. So the security policy is a great way to read current encryption status in bulk for every device.  ... View more

Systems Manager has added a few new updates related to end user portals and authentication flows.    Enrollment portal is changing to enroll.meraki.com The previous enrollment portal, m.meraki.com, will be removed and redirected to enroll.meraki.com later this year.  Self Service Portal is portal.meraki.com  This is where (if enabled) end users can view all of their managed devices, Trusted Access devices, and create new Trusted Access devices. More information on Trusted Access, the unique SM+MR integration for unmanaged devices, view the documentation here.  Both of these portals now support custom branding!  Add your organization's custom logo and coloring, so end users see your organization's branding on both enroll.meraki.com and portal.meraki.com to give a more personalized portal experience. Documentation found here.     Both of these portals now support SAML authentication!  This allows Systems Manager integration via SAML with identity providers such as OneLogin, Azure, and more. Documentation found here.  Optionally add Duo 2FA prompts to the identity provider for additional security! Documentation found here.  Example end user flow via enroll.meraki.com with SAML OneLogin + Duo 2FA: ... View more

A new profile for Android was just released allowing more granular control over how the Google Play Store sends app updates to Systems Manager managed devices.     This allows administrators to configure Android managed apps to be in 3 different auto-update mode policy states:    Default - In this mode, the device needs to meet certain criteria to automatically update the app, and it will happen at some point (uncontrolled) within a 24 hours period of the new app update becoming available on the Google Play Store. The criteria for the device to update: device has an active WiFi connection to the Play Store, device is charging, device is idle, and the app to be updated is not running in the foreground.  Postpone - When using the Postpone mode, the app will not be automatically updated during 90 days after it first became out of date. After this 90-day period, the latest available version of the app is automatically installed with the default update behavior. After the app is updated to the latest available version, a new 90-day postponement period will begin the next time the developer publishes a new version of the app. High Priority - When using the High priority mode, the app is updated, as soon as possible, after the developer publishes the new version and it has been reviewed by Google Play. If the device is offline then, the app will be immediately updated the next time the device is connected to the internet.   Full documentation here     ... View more

Our Systems Manager development team has been hard at work and we wanted to take a moment to share a few of the recent updates.    Support for the latest operating systems Just a general reminder that Systems Manager supports the latest operating systems released this Autumn: Windows 11, Android 12, and iOS/iPadOS 15, macOS 12 Monterey https://documentation.meraki.com/SM/Other_Topics/Supported_Operating_Systems_with_Meraki_SM And along with this, many new profile payloads were added for each platform which can be seen on the Systems Manager > Settings page. And there's still a few more in the works (looking at you, BitLocker!) which we will update everyone about soon.    Shared Device Mode is now expanding features and bringing Apple Business Manager support Apple Business Manager devices now support Shared Devices with some new features too! These updates apply to existing Apple School Manager Shared Device deployments as well.  Checkout the new video to see how you can leverage temporary guest sessions and Managed Apple ID sessions with Shared iPad:     Windows Trusted Access Beta A Windows Trusted Access .msi now has a beta release with UI. Be sure to see Kevin’s post on how to sign up. The product team is collecting feedback from Trusted Access feature for Windows, and for Trusted Access in general. So please give it a try and share feedback! If you're not familiar: Trusted Access allows simple and secure certificate based access to Meraki MR SSIDs for unmanaged devices! Here is the documentation with more information.    New Android SM app beta process We are constantly rolling out various updates to our Android SM app, and we are now publishing new updates to the beta Google Play channel before releasing to the main public store. This is a great opportunity to test a new SM app update before it is available to all devices. To subscribe a device to beta app updates simply find the Meraki Systems Manager app in the Google Play Store and press “Join" in the "Join the beta” section.    SM API updates SM has added a new API endpoint to get security policy compliance per device:  GET /networks/{networkId}/sm/security/policies Also now with the existing GET /networks/{networkId}/sm/devices endpoint, you can add /sm/devices/?fields=url parameter and have the device link in Dashboard returned as apart of the response. This can be extremely useful for custom monitoring and pulling additional device information from Dashboard.    There’s a few additional projects our developers are working on and we cannot wait to share them when they are ready. Happy SMing and see you all in the new year! ... View more

Systems Manager now supports group synching when Azure AD is used for owner enrollment authentication!   This allows users to authenticate with Azure AD, and for administrators to leverage the existing Azure AD groups as tags in SM.   Features include:  As users enroll and authenticate they will be added into the Systems Manager > Owners page as an "Azure" type. If the same username/email already exists, the Azure info will be merged into the existing Owner.  The Azure AD "memberOf" groups are added as tags in Systems Manager, so administrators can use the same groups to scope apps/profiles via Systems Manager.       The setup on Systems Manager's side is simple and only requires 3 fields to be configured to point to an Azure AD instance. For full setup steps be sure to review the new documentation about how to setup Azure AD in SM.  ... View more