Meraki

jared_f · ‎Jan 18 2018

This is not a sole Meraki issue. Other MDM providers like Jamf and AirWatch struggle with the same thing -- probably an Apple limitation that is stopping the implication. I will submit a Make a Wish requesting this though.

jared_f · ‎Jan 17 2018

I don’t believe you can set that for each device.

jared_f · ‎Jan 17 2018

@Melissa I would be willing to beta this (any basically any other MDM feature lol)!

jared_f · ‎Jan 17 2018

But, it is still unreliable sometimes my laptop and phone is in a different state. Not very accurate.

jared_f · ‎Jan 17 2018

There is also no way of forcing location services for the Meraki MDM app, users can easily turn it off.

jared_f · ‎Jan 17 2018

How often does Geo-Fence update. I tried this with device restrictions - setting wallpaper everytime a device arrived at the office, but it seemed very delayed.

jared_f · ‎Jan 17 2018

@gpintop I configured my dasboard to display just the owner section (the "+" in the arrow lets you do this). It exported like this: Owner first, last <doejohn@mycompany.com> I am wondering if you could pull info for the script like that. I am going to forward this over to our software engineer and see what he can come up with.

jared_f · ‎Jan 16 2018

@gpintop Very nice, could you share the script? Trying to get something going on my end similar to you. Currently playing with this: -- select the file -- change this to a direct path if you prefer set theFile to (choose file with prompt "Select the CSV file") -- read the file contents: set f to read theFile -- break the file into paragraphs (c.f. rows) repeat with row in (paragraphs of f) -- parse the row into comma-delimited fields set fields to parseCSV(row as text) -- now you have your data: set recipientAddress to item 1 of fields set theSubject to item 2 of fields set theContent to item 3 of fields set recipientName to item 4 of fields -- presumably you want to do something more with this data? tell application "Mail" set NewMail to make new outgoing message with properties {subject:theSubject, content:theContent, visible:true} set message signature of NewMail to signature "OG" tell NewMail make new to recipient with properties {name:recipientName, address:recipientAddress} send end tell end tell end repeat on parseCSV(theText) set {od, my text item delimiters} to {my text item delimiters, ","} set parsedText to text items of theText set my text item delimiters to od return parsedText end parseCSV

jared_f · ‎Jan 15 2018

You could download a CSV from the Dashboard and use a type of Apple Script to pull information from it and send an automated email. I am using the email automation using Apple Script in a script to restrict terminal. tell application "Mail" set theSubject to "Restricted Software Violation" -- the subject set theContent to "Violation - Terminal Opened " -- the content set theAddress to "technology@flitt.org" -- the receiver set theSignatureName to "Automated Management" -- the signature name set msg to make new outgoing message with properties {subject:theSubject, content:theContent, visible:true} tell msg to make new to recipient at end of every to recipient with properties {address:theAddress} send msg end tell This is something I am very intrested in, I am going to see if I can do somethin using Apple script. Jared

jared_f · ‎Jan 12 2018

The remote control is very restrictive and the way Meraki has package deployment turned on is also quite confusing. Hoping for improvement soon to the Mac management side!

jared_f · ‎Jan 12 2018

To add on to what @PhilipDAth mentioned, restrictions that are more restrict (i.e. no camera) will trump other profiles that don't have camera turned off.

jared_f · ‎Jan 11 2018

From my understanding the Apple User Scoped profiles are only used for shared devices in the classroom. Navigate to Systems Manager > Settings > Click Plus Button > Click "Meraki Managed Profile" > Add Settings > VPN > Configure and Scope. Here is some images to help: ~Jared Find this helpful? Click the Kudos button!

jared_f · ‎Jan 11 2018

When I had a trial of Jamf Pro I loved the Mac management. The only part that stopped me from purchasing and moving was the rudeness I experienced with my sales agent, it took four months to get a trial setup. Their healthcare team was great and I was ready to send over a PO, but they would not honor our first quote and increased the device minimum. They also charge a ridiclous ammount for a JumpStart.

jared_f · ‎Jan 11 2018

I am currently deploying this via this package manually on each machine. Does DEP support the agent being installed OTA? ~Jared

jared_f · ‎Jan 10 2018

As I have been testing our Mac management I wanted to enroll our devices with the MDM Profile and Meraki Agent to get full management capability. I found these two useful commands to install the profile and agent both at the same time. I just placed the profile and package in private/var via and installer and then used these two commands in a post install script to trigger it: Just wanted to share if anybody else is looking to do something similar, Jared

jared_f · ‎Jan 10 2018

My whole home network has been getting re-done for the past year and a half. Currently using two access points to provide our 1000/1000 fiber connection to my users. My goal is to finish running new ethernet and phone wires to select location to prepare for a VoIP transition in the future. 2018 Plans: -Put fiber and coax in new conduit being ran to telco pole. -Run seperate fiber feed to our garage for internet and VoIP connection for intercom and phone. -Replace our current surveillance system (hoping to buy some Meraki cameras). -Re-do my service loops to our phone punch down block (I did individual loops, looks shabby to me). -Move voice services to an IP phone provider. Here is my current setup - I did not take the pictures before I started working on it but there was no rack or telephone box before Also, at the office I am hoping to convince IT that they need a rack, a real router, and some new switches! I hope for your vote! Jared

jared_f · ‎Jan 10 2018

https://discussions.apple.com/thread/3963202 Seems to be some good info there, it is a little old. I would persoanlly go the SM route, blocking ports that iMessage uses could interfere with other traffic.

jared_f · ‎Jan 8 2018

Depending on what method they use, if it involves touching the device, take the time to setup DEP. If the phone ever gets wiped, it won't require enrollment to happen again.

jared_f · ‎Jan 8 2018

I took some of my unsupervised devices that were not in my DEP and added them to DEP with the new Apple Configurator. Any DEP device can be restored from an unsupervised or supervised backup (iCloud or iTunes) because DEP pushes the enrollment payload after the restore wizard. This cannot be done if you are just using Apple Configurator to add supervision. Device must be enrolled in DEP and have prestage enrollment setup in Meraki in order to complete this.

jared_f · ‎Jan 8 2018

I don't have any experience using ASM, but are your users going to be installing applications you only issue? If you use DEP you could skip and restrict Apple ID setup and just issue all apps via VPP codes and scope them to the Meraki MDM app for download. No Apple ID required!

jared_f · ‎Jan 7 2018

I believe so. Why is the certificate such a big issue? It only takes 2 minutes to make/renew! Also, I believe that this distinguishes MDM traffic between different servers.

jared_f · ‎Jan 6 2018

Certificates are free for anyone who has an Apple ID (also free). They used to (Apple) make you have a developer account for certificates.

jared_f · ‎Jan 6 2018

This is an Apple limitation (as 99% of all MDM problems are). Also, it would be a security problem for some organizations, especially healthcare which I do, to have their MDM traffic over the same certificate. Meraki is is great at alerting you when that certificate is about to expire and has great guides to renew it. Hope thay answers the “why” aspect, Jared

jared_f · ‎Jan 5 2018

I believe that is there goal. That is possible, if the device is in DEP and unsupervised backup can be used. This method does work in Apple Configurator.

jared_f · ‎Jan 5 2018

@DBHS When doing the setup make sure the check mark to "activate" the device is not checked. Then go into deploy.apple.com (DEP) and assign it to your Meraki server (serial # usually works best) > set prestage enrollment in Meraki (make sure this is done before setup on the device is started. Jared

About jared_f

jared_f

Community Record

Badges