Meraki

PaulF

@Deelightful28 I have a workaround for this: Create your Exchange profile in Apple Configurator and export Now, go to Systems Manager > Settings and click Add Profile Choose Upload custom Apple profile Now, you have the choice of deciding if this is deployed using the Device, or, in your case, User channel

PaulF

You shouldn't need to do the above: https://documentation.meraki.com/SM/Device_Enrollment/Systems_Manager_Agent_and_MDM_Profile_Enrollment?_gl=1%2Aj48x4g%2A_ga%2AMjAwODI3NjIxMS4xNzMwODk1NzUy%2A_ga_DG2DVWGCGW%2AMTczMjIwNDExNS4zOTUuMS4xNzMyMjA0MTM2LjAuMC4w#Auto-installing_the_macOS_Agent

PaulF

https://documentation.meraki.com/SM/Deployment_Guides/Systems_Manager_Sentry_Overview#Sentry_Wi-Fi_Security

PaulF

Further to the Learning Hub, as described above, there's also https://info.androidenterprise.training/ and https://it-training.apple.com/tutorials/apt-deployment/ and, lastly https://www.youtube.com/playlist?list=PLFwlU-gQMpUgRhoidGgUWwCfE2QTpqyoF (MerakiMinute SM playlist)

PaulF

Authentication is only done at the time of enrollment with iOS, so if you're talking about changing the settings in Systems Manager > General > End User Authentication then you'll notice that Systems Manager > Owners will populate when new users enroll However, if you are talking about setting up Federation in Apple Business Manager / Apple School Manager, and are using shared iPad, then you may notice a few changes on the device, and you'll have to ensure that you go to Systems Manager > Overview and sync Apple School Manager to get the new users Without any more detail, I can't offer any more information BUT, long story short: You won't have to reset / re-enroll devices

PaulF

@shlomi The first screenshot that you show is Administrators For User Authentication, you need to provision *owners* in Systems Manager > Owners Create a couple of owners, ensure that Systems Manager > general > End user authentication is set to Meraki Managed Accounts, test, and let us know if successful

PaulF

Is your Root CA validity longer than 398 days? https://discussions.apple.com/thread/252689988?sortBy=rank and https://support.apple.com/en-us/102028

PaulF

This issue is not an SM issue, but a VPP issue. Renewing your token should rectify the issue I see that this issue is not limited to SM, but every other MDM vendor Occasionally Apple will revoke tokens for reasons that we are not privy to.

PaulF

In the meantime, don't forget that you can either enable this via Command Line or Script capabilities in Meraki Systems Manager. Script is likely to be more robust

PaulF · ‎Oct 16 2024

Yes. A problem in azure. A painful problem. A problem that I've not solved. The *only* way around this is: You create a single SAML application, and then have each of your Meraki instances within it. The blacked out area of the image above are unique URIs within Meraki What I *think* you're looking for is for Meraki to support unique Entity IDs. I'll feed this back, but can't make any promises

PaulF · ‎Oct 14 2024

Firstly, you'll need an ADE profile that skips AppleID. That's Done through Systems Manager > ADE > Enrollment Profiles You can then create one which skips the various AppleID settings. You'll need to assign this to your device(s) and then set them up You can then go to Systems Manager > Settings, create a new profile and add a Restrictions payload to it, and deselect Account Settings

PaulF · ‎Oct 11 2024

Morning all. This has come up several times, and, prompted by a colleague, I went to investigate how to dewarp a 180 degree RTSP stream from a Meraki MV Camera You're going to need two pieces of software. FFMPEG and FFPLAY Firstly, there is no warranty, implied or otherwise here. FFMPEG is used at your own risk, and this is the suggestion of an engineer who needed a Proof of Concept. Nothing else I'm going to do this on macOS, rather than windows! So, firstly, download FFMPEG and FFPLAY from https://www.ffmpeg.org/ Secondly, go to Meraki Dashboard, Cameras, Cameras, select your camera (MV33 in my case), then Settings. Enable RTSP and get the URL. In should be in the format of rtsp://192.168.128.1:9000/live for example Okay, let's first test that we can play the stream Open up Terminal, navigate to where you've downloaded FFMPEG and FFPLAY Type: ./ffplay -rtsp_transport tcp -t rtsp://192.168.128.163:9000/live After a lot of text, it should spawn a new window and show you your stream: If you've got this far, you've done the hard work. You can close the video window, which will terminate FFPLAY Now, we need to do two things. The first is to dewarp. We are going to use FFMPEG for this ./ffmpeg -rtsp_transport tcp -i rtsp://192.168.128.163:9000/live -vf "v360=fisheye:output=c1x6:ih_fov=180:iv_fov=180:pitch=-90" There's a lot to unpack here. We use FOC=180 because this is a fisheye, NOT a 360 camera. Pitch rotates the image too, if need be, depending on your view point Now, we need to send the video stream, dwarfed, to FFPLAY ./ffmpeg -rtsp_transport tcp -i rtsp://192.168.128.163:9000/live -vf "v360=fisheye:output=c1x6:ih_fov=180:iv_fov=180:pitch=-90" -f matroska - | ./ffplay - -f is format, and we chose the matroska format. We then pipe this to ffplay Run this command (I've only grabbed part of this image because it's 1056x6336 resolution Now, the hard part. We can use a parameter in FFPLAY to both crop and rotate the image if need be I'm going to chose the middle part of the image above and rotate: ./ffmpeg -rtsp_transport tcp -i rtsp://192.168.128.163:9000/live -vf "v360=fisheye:output=c1x6:ih_fov=180:iv_fov=180:pitch=-90" -f matroska - | ./ffplay - -vf crop=800:800:1600:800,transpose=1 -vf crop=800:800:1600:800 takes the image at 1600:800 and creates a 800x800 image from there using the transpose=1 rotates it 90 degrees clockwise with no flip we get Now, this is not the central part of the original image, it's actually the left hand side, but it's dewarped! The difficult part ahead of you now is understanding which part of the image it is you want to see using vf crop=800:800:1600:800 You'll only need to change the last two parameters to experiment Hope that's been useful!

PaulF · ‎Oct 11 2024

Your link looks legitimate I use VLC. To open a network stream, click on File then Open Network Paste in the URL for RTSP and click Open and you should be good

PaulF · ‎Oct 8 2024

In short, there's no capability to blur a face when detected, or in retrospect The ONLY way this could be achieved would be to take an RTSP feed from each camera and use an external capability to blur the recorded video

PaulF · ‎Oct 8 2024

This is the normal way for adding apps for android: If this is NOT your normal workflow for adding apps, can you list the exact steps you take to add an app

PaulF · ‎Sep 11 2024

As other's have mentioned, Apple don't allow MDM vendors to manage Airplane mode (for obvious reasons). The ONLY way to achieve this is to put the devices into Kiosk Mode. You can do this in one of two ways Basic Kiosk Mode Autonomous Kiosk mode The first can be used with *any* application, and locks the device into using only this application. There are a tonne of caveats and nuances, though, so I would suggest testing Autonomous Mode is much more interesting: It allows you, when using applications that you have developed, to put the application into kiosk mode. BUT: It allows you to develop capability within the app to go into and out of kiosk mode WITHIN the application itself Anyway, long story short: Kiosk mode is the only way to prevent users using control centre

PaulF · ‎Sep 9 2024

Connect your device to a Mac and use Apple Configurator to look at the device's logs to see what's going on. Apple logs are quite verbose, so it should give you an insight into what's going on But @JTM43 process looks to be the right process for TestFlight

PaulF · ‎Sep 9 2024

Microsoft patch updates are a dark art, and require complex management. So much so that there are customers that may use SCCM and Intune, but still use 3rd party products specifically for patches and app updates As @BlakeRichardson mentions, Meraki Systems Manager is an MDM, which is primarily *Device* management

PaulF · ‎Aug 16 2024

What @BlakeRichardson was saying is that you need to create a new GOOGLE account, as here: https://support.google.com/accounts/answer/27441?hl=en but NOT use GMAIL. If you've already a company email, use that to create your new Google account. However, one thing to be aware of is that, if you leave the company, this may leave the company unable to use that account, so I'd suggest an email account that other people have access to at your company

PaulF · ‎Aug 14 2024

This is quite a wide question, so I'll suggest a bit of reading here: https://documentation.meraki.com/SM/Deployment_Guides And if you can tell us exactly the steps that you take to get to where you are having an issue, that would be useful Thanks!

PaulF · ‎Aug 14 2024

I've spent the morning testing with this Created a ADE profile with a 5GB NO Authentication Wiped device Ensured I had a bunch of users in school.apple.com Used my existing Education profile, which includes a device group to aid logging in: Synced Users from Systems Manager > Overview∫ Synced Users from the top of the Education profile above Wiped device and enrolled Got to logging in, which I did with three users No issues. I'd look at your quote size. This is in MB, not GB, so my 5000 above is just shy of 5GB I hope that helps

PaulF · ‎Aug 9 2024

Have you used managed app config with GMAIL. This doesn't sound like a behaviour that can be achieved without managed app config

PaulF · ‎Aug 9 2024

This is a limitation of the Android Enterprise API: There's no ability for us to prevent users turning location on or off.

PaulF · ‎Aug 9 2024

Both of these are suitable solutions to not using conditional access. Duo Trusted Endpoints is the easiest to roll out

PaulF · ‎Aug 9 2024

You can hide the settings application (Use the Android System Apps payload) but that doesn't stop the user from using shortcuts to turn off location A limitation of android, sadly

About PaulF

PaulF

Community Record

Badges