Meraki

PaulF · ‎Sep 13 2022

Does the app crash when the URL is set to something more generic, say https://www.meraki.com Systems Manager uses standard APIs to set the managed app config, so it's more likely to be a chrome thing. But, let's see. If you could report back with your findings, that would be great.

PaulF · ‎Sep 8 2022

Hi @walkman So, the ability to do things on an Apple device comes in two flavors: Profile and Commands Now, if you've ever played with Apple configurator, you'd have noticed that you can create a mobile config and add that to a device. You can do the same with SM, just in case there's anything we don't support right now, or you have complexity that the UI just can't handle. Now, setting the timezone is NOT a profile, but a command. That's handled differently to a profile, which is why you can't upload a mobileconfig to set the time zone However, all that aside, I made a strong case with product management and explained that, if you don't set the location to "allow" at the time of enrollment, then confusion can occur with regards to where the device thinks it is. Watch this space.

PaulF · ‎Sep 6 2022

have already fed this back 🙂 Good luck!

PaulF · ‎Sep 6 2022

I'm with you on this: ADE Token location: VPP token location (this looks to have moved recently) The two tokens are NOT the same.... and not interchangeable.

PaulF · ‎Sep 6 2022

Thanks for confirming: But location is used for other things, not just apps. The system needs the user to confirm they are okay with location before you'll be able to use "set location / time / time zones tc" automatically

PaulF · ‎Sep 6 2022

A quick question: Did you "skip" location in your ADE profile? Turning location on for apps and settings afterwards is painful and cannot be done systematically: If you've no user acceptance of the ability for location, then setting automatically won't work However, that's not actually the answer to the question, which is: How doing I set region systematically? I'll feed this back to the product team

PaulF · ‎Aug 24 2022

Apologies for not replying sooner PPPC payloads should be installed before the application. I've seen instances where the PPPC payload is useless if installed after the application I'd go back and look at the configuration you have if you're still being prompted.... Feel free to share if need be.

PaulF · ‎Aug 24 2022

Further to @ConnorL post, you can also watch this: https://www.youtube.com/watch?v=KbFaQcAmc2s I would add: Do NOT forget to add the wifi profile if adding to ADE only (and then enrolling at a later date: It will probably fail)

PaulF · ‎Aug 23 2022

How are you licensed? Co-term or Per Device Licensing?

PaulF · ‎Aug 17 2022

Not Systematically through MDM, no.

PaulF · ‎Aug 17 2022

With many integrations, there's two options: PULL: Where the data is PULLED from Meraki, using the APIs PUSH: where, using web hooks, syslog, data is pushed from Meraki The Splunk integration appears to be a PULL integration, according to the APIs that it uses: https://api.meraki.com/api/v1/organizations/:org/devices/statuses/ https://api.meraki.com/api/v1/organizations/:org/uplinks/statuses/ https://api.meraki.com/api/v1/organizations/:org/devices/uplinksLossAndLatency https://api.meraki.com/api/v1/organizations/:org/networks https://api.meraki.com/api/v1/networks/:network/devices I note that the SM endpoints are not included in there HOWEVER, whilst not impossible, there's a little work for you to do. It looks like Splunk can ingest data using any REST based API: https://www.splunk.com/en_us/blog/tips-and-tricks/getting-data-from-your-rest-apis-into-splunk.html And this starts with a simple form to fill in: Don't forget that Meraki uses a custom parameter for Auth, X-Cisco-Meraki-API-Key: <secret key> Which should go into your headers. Let me know how you get on....

PaulF · ‎Aug 17 2022

That you got the "MCPasscodeErrorDomain" response shows the Meraki SM sent the command successfully to the device, and that the device received it, but couldn't action it. Getting the inability to do any further commands against the device would imply that there was a deeper issue with the device itself. Whilst brutal, resetting it appears to have been the only resolution.

PaulF · ‎Aug 8 2022

So, once step that many people miss is assigning the device to a network when it appears in the ADE list in Meraki. This is a step unique to Meraki SM as it has the ability to partition SM into Virtual MDM instances: You'll note that each device is assigned to a Network. You can do this in two ways Either assign the devices to a network like this: or ensure that there's a default network in Organization > MDM

PaulF · ‎Aug 4 2022

Macs have to be wiped and restored for the addition to ADE to work...

PaulF · ‎Aug 4 2022

This works with Cisco's Office 365 mail, and has for years

PaulF · ‎Aug 4 2022

I've included my entire Exchange profile for you below. As you'll see, there's actually very little in there:

PaulF · ‎Aug 4 2022

This really does depend on how the device is managed But, if MDM enrolled, you should be able to wipe the computer If agent enrolled, you could either wipe the computer from the command line or Remote Desktop, or use the following command: net user username /delete Where username is the username of the user in question. I don't know if this logs the user out instantly....

PaulF · ‎Jul 29 2022

Hi, So: It sounds like you have an education profile deployed ton your Macs to manage users and to use these as "shared" device If you go to Systems Manager > Settings > and find a profile that looks like this: This will show you your education profile. Here you can make changes, and decide whether you'll use local users or Apple School Manager users. Just ensure that your device has connectivity to the internet and has the Education profile scoped to it also I'd also check that all your ADE and VPP tokens are still valid: an easy way to see this is to go to Systems Manager > Overview and click the Sync button next to Apple School Manager: Let me know how you get on and we'll go from there....

PaulF · ‎Jul 29 2022

In your Exchange profile in Systems Manager, just check that you've the relevant services enabled:

PaulF · ‎Jul 29 2022

add the app to Systems Manager. Then, go to Systems Manager > Settings and click the + in the top right hand corner Create a new Device Profile Click the + on the left hand side and add managed App Config Select the device platform, then the newly added application You'll now be able to add the keys and values relevant to the app

PaulF · ‎Jul 29 2022

This is done through managed app config. Chrome has a surprising amount of things that can be managed in this way. details of which are here: https://chromeenterprise.google/policies/#ManagedBookmarks It does go into some detail, so I'll give an example of some simple bookmarks We'll create a new policy using Managed App Config for Android We can add a new entry, find Managed Bookmarks in the list and add something like the following: [{"toplevel_name": "Acme Bookmarks"}, { "name": "Cisco", "url": "cisco.com" }, { "name": "Meraki", "url": "meraki.com"}]

PaulF · ‎Jul 29 2022

Some things to know: Device Type Enrollment Type A screenshot of your policy: Is it a device or user policy

PaulF · ‎Jul 20 2022

The settings app is the only app that can't be hidden, alas. But, should the home button be hidden, then assistive touch is a great way to give the user the option of going back to the Home Screen. None of this is ideal, I'll grant you...

PaulF · ‎Jul 18 2022

Not systematically, no... There does appear to be an update available, though: https://answers.microsoft.com/en-us/windows/forum/all/how-to-open-heic-file-in-windows-desktop/4efd294e-8992-4fbd-a15d-6478def05b1d

PaulF · ‎Jul 18 2022

Now supported in android SM app version 3.8.4 is the ability to set the brightness. Have a look at Systems manager > Settings > Android Kiosk:

About PaulF

PaulF

Community Record

Badges