Meraki

jared_f · ‎Jun 29 2018

I really want Meraki to allow the user invite to happen via the Meraki MDM Self Service app. Then, the user can just go in an accept the invitation.

jared_f · ‎Jun 7 2018

As states above, a wipe and re-enroll is necessary. If preserving user data is necessary have the user make a backup on their current device and restore it on a different device. This will allow the device to go through prestage enrollment and they will receive the fresh MDM profile. Then make a backup and restore on their original iPad.

jared_f · ‎Jun 1 2018

Congrats latest MOTM's!

jared_f · ‎May 24 2018

AC2 can be a real pain. Here is usually the stuff that causes this error: ~When you are going through setup make sure you disable the option to "Activate and complete enrollment". ~Also, delete your server under "Apple Configurator 2" > "Preferences" > "Servers" and re-add. ~Make sure you are grabbing the right Meraki link ~Is the WiFi WPA2 Enterprise (user/pass & cert.)? -- that seems to not cooperate sometimes. ~Purge AC2 program and files and re-start. Jared

jared_f · ‎May 22 2018

Under Systems Manager > General (under the “Configure” heading) > Access Rights (you have to scroll down a bit to see it) you can restrict some of the SM capabilities. I believe these are per network rules, maybe create another SM network (aka “site”) for BYOD devices and apply these restrictions? @Miyo360 wrote: Hi, I have been using Meraki MDM for a while at our workplace. All is good. We are expanding the use of it to personal devices (BYOD). It has been noticed that the MDM Management Profile requests the following rights on iOS... Erase all data and settings Lock device and remove passcode List configuration profiles Add/remove configuration profiles List provisioning profiles Add/remove provisioning profiles List device information List network information List installed applications List restriction information List security information Apply settings Install and remove applications and data Some of these rights seem excessive, particularly 1, 2, 9 & 13. Understandably, users with personal devices are hesitant to allow the profile. Is it possible to edit this list? Or change what rights the management profile requires? Is there a bare minimum list of rights required for the management to operate correctly? The profile is only installing iOS mail settings. We are not using the agent app. Thanks in advance.

jared_f · ‎May 18 2018

Are you using authentication? That may be causing the problem. Also, make sure you have the Meraki certificates selected when enrolling devices. If not, they won’t ping the server resulting in errors.

jared_f · ‎May 11 2018

Are you enrolling your Apple TV into DEP or just using the manual enrollment payload?

jared_f · ‎May 1 2018

Thanks @CarolineS and Meraki team!

jared_f · ‎Apr 27 2018

The device has not received its configuration from DEP. As soon as the device enrolls, it will show as pushed.

jared_f · ‎Apr 26 2018

Why is Two Factor Authentication needed? If all devices are SM managed you just have to scope the Classroom profile to the students and teachers. Are you signed up for VPP and DEP? Apple School manager does most the work from my understanding. Not really in education IT so I can't really help. Maybe a K12 admin will chime in.

jared_f · ‎Apr 26 2018

@Jordanw Are you using Apple Classroom yet?

jared_f · ‎Apr 26 2018

Good luck. The only other thing I could think of it to get rid of Safari via a restriction and push a safe browser available in the App Store. For device filtering: I am really a fan of http://www.mobicip.com - they do cost a bit, but there is no appliance and you just push the proxy configuration profile.

jared_f · ‎Apr 26 2018

Also, are you using any filtering solution like OpenDNS or Light Speed on the network side?

jared_f · ‎Apr 26 2018

Unfortunately, this is not possible. What kind of traffic are you seeing? Maybe push out the web content filter payload?

jared_f · ‎Apr 25 2018

I would ping support and see if they could remove it for you.

jared_f · ‎Apr 25 2018

@MikeMandalorian This is not possible and my best guess is it will never exist. If Apple allowed you to push credentials to apps, it would probably be agains the EULA that the user agrees to.

jared_f · ‎Apr 25 2018

The only thing that would be causing this is the IP restrictions on logins.

jared_f · ‎Apr 13 2018

Do a manual re-enroll over the old profile via m.meraki.com

jared_f · ‎Apr 12 2018

I was scrolling through this today, did not see @BrothersTM's photos last time. Very impressive, I am not sure if I would have that much patience to color code. Looks awesome!

jared_f · ‎Apr 10 2018

Thanks for the mention @CarolineS! Congrats @PhilipDAth!

jared_f · ‎Apr 10 2018

I know there is a restriction to lock Bluetooth currently, but if it is off then it gets locked off. Maybe the ability could be added to send the lock restriction right after the Bluetooth ON command. Thanks Apple...

jared_f · ‎Apr 10 2018

Maybe setting up a mandatory app security policy and have it email to you on violation? I have not done this in a while, so not sure if that would work (because the app is still in scope). Make sure you are scoping the Meraki MDM app with VPP codes and have it auto-install. If it ever gets removed, it should re-install on check-in.

jared_f · ‎Apr 6 2018

@vassallon I believe apple as made this a remote command, so I believe there is no way of enforcing this via configuration profile. Maybe Meraki could setup a remote command to send bluetooth on during check-in.

jared_f · ‎Apr 5 2018

You could use Create User PKG and make a local admin account. Then push that via Meraki to computers in scope.

jared_f · ‎Apr 3 2018

We need this feature with 60+ apps in the catalog. I will submit a "wish".

About jared_f

jared_f

Community Record

Badges