Meraki

jared_f · ‎Jul 24 2018

@PhilipDAth Nothing is wrong with Sudo. I execute everything I do remotely that doesn't need to be done on the user level with Sudo. This is more of an end user app. For example, a user needs to install software and doesn't have to put in a request to do it. It gives the security of only having standard users, but having them be able to lift it when they need it.

jared_f · ‎Jul 24 2018

Until this is fixed and Meraki can guarantee 99.9% uptime, I will be using ARD to push software. For a promising tool, it just loads up the error logs.

jared_f · ‎Jul 24 2018

I saw this on twitter and thought it was interesting. The app "Privileges" was developed by Rich Trouton and his team at SAP. Once installed, the app allows users to click it and upgrade there account to an admin account and then it demotes after 20 minutes. Here is the Github link: https://github.com/SAP/mac-enterprise-privileges Would anybody here deploy this?

jared_f · ‎Jul 24 2018

@Namik I have been begging Meraki to allow us to use a blacklist policy to kill the process, but it has not been implemented. I invite you to "submit a wish". Are you user's admins? If not, you could use OSX server and create a "folder restriction" with the path to pages. I have went ahead and created the payload for it and here is a Google Drive share link. It works fine on my MacBook Pro - pages won't open with the error: Only admins can get around it. Drive link: https://drive.google.com/file/d/1txtoOPsxWrM21xX5dutV_Z7otsHfe69D/view?usp=sharing Hope this helps, Jared

jared_f · ‎Jul 23 2018

Is anybody else seeing errors for any software they are deploying via SM? Nothing is installing, I regenerated and re-uploaded the custom packages and nothing is happening. Any help would be much appreciated.

jared_f · ‎Jul 20 2018

We don't have a large amount of Macs. But this is our procedure. The device is assigned to the user with there AD credentials (during DEP) and the appropriate profiles and apps come down. During setup, the local account is an admin account (we call it "techlocal") is created. After verifying that the AD bind was successful (configuration profile) and the login page profile came down, we hand it over to the user - they login with there AD credentials and a mobile account is created. Anytime they are on the corporate network, we rsync via a script at login all there local data (Files on the Desktop, Documents, Photos, Videos) onto there network home (stored in an SMB share). The network home acts as a backup for there data. We played with the idea of ditching AD and using something like NoMAD to "lose the bind", but keep the benefits of AD (kerebos), but decided against it as we have no problem with AD.

jared_f · ‎Jul 20 2018

You could use create user PKG, but I would be very careful and make sure SM recognizes it as installed!

jared_f · ‎Jul 19 2018

I am 95% sure that G Suite authentication cannot be used with Meraki. While it might be a pain, I would move all your Apple devices into a separate network and disable authentication.

jared_f · ‎Jul 19 2018

I am assuming that the student isn't receiving profiles and apps which is causing the login to fail and bounce from Meraki. No Apple devices are communicating with Meraki which may be causing the problem you are seeing. It seems that enrollment comes down just fine through DEP, yet nothing is syncing down. They are working on the problem.

jared_f · ‎Jul 19 2018

Same as all of you, nothing is pushing out. I re-enrolled an iPad through DEP and the profile comes down, but nothing comes down. I thought our firewall was blocking the APNS.

jared_f · ‎Jul 18 2018

Having the same problem. Nothing is syncing (profiles, apps, etc.). I have tried enrolling the device again. DEP is coming down just fine and the management profile shows that it is there, yet nothing comes down. I thought it was a firewall issue, but after switching it to my phone hotspot, it is clearly an Cisco/Apple/MDM issue. This needs to be addressed ASAP.

jared_f · ‎Jul 16 2018

@BlakeRichardson I have tried doing a single device (not using another to restore and backup) for months and can never get it to work. Luckily ALL new shipped devices are DEP. From my understanding, in order to enroll a non-DEP device the user has to do the 2 device backup method or be moving to a new device (iCloud backup works there). Apple has never really clarified the problem.

jared_f · ‎Jul 13 2018

@swillette702 As other have said, you cannot lock certain apps with a password, but you could use the whitelist/blacklist profile and scope it on the user level and device level. Are you deploying the Meraki MDM app? If so (and you have it enabled), users can login with their credentials (if they are configured in Meraki or using a directory connection) and be assigned different profiles depending on their position/department/etc. I would create a standard blacklist profile for that iPad that hides all the apps you don't want the customer to see and scope that to the "customer owner". Anytime the "customer owner" is logged into the iPad, that blacklist will sync down. If an employee logs into the Meraki MDM app, then they see the employee set of apps (the blacklist would remove). This is the only work-around I could think of. I don't have a test iPad on hands, but I am sure there is a better way to automate this with a series of policies and profiles so when no user is assigned to the iPad it gets the customer blacklist profile (hiding things you don't want the customer to touch) and when a employee logs in with his/her credentials then they get to see everything. Once I get my hands on a tester, I will give it a go and report back. Jared

jared_f · ‎Jul 13 2018

It is DEP, they don't exactly "auto configure", the device is setup in Meraki to receive certain apps or profiles.

jared_f · ‎Jul 12 2018

@BlakeRichardson I tried making an iCloud backup on a non-dep device, added the device to DEP and went through setup. After restoring from the iCloud backup during settings, DEP does not come down.

jared_f · ‎Jul 11 2018

In summary (that thread was long): Device A needs to be put in DEP? Make a backup of Device A and restore it on Device B then make a backup of Device B and restore it on Device A The following will NOT work: Backing up Device A, erasing Device A, restoring Device A DEP enrollment will not come down.

jared_f · ‎Jul 9 2018

Totally forgot lol! I will be sure to submit in the next contest!

jared_f · ‎Jul 5 2018

Looping in @Melissa to see if engineering is aware.

jared_f · ‎Jul 5 2018

I am seeing this. I did an app inventory on a device and suddenly, all catalogued apps came down. I am nervous that as soon as devices begin inventorying that apps are going to start coming down.

jared_f · ‎Jul 2 2018

Is everything ok on the certificate side (with Apple)? What happens if you send a mass check-in command?

jared_f · ‎Jun 29 2018

Triggering the activation in Apple Configurator 2 before handing the user the iPad has helped. I have noticed this delay also.

jared_f · ‎Jun 29 2018

I support this 100%. In addition, allowing us to add tags to that specific enrollment profile and allowing device names to be populated based on variables like $username, etc.

jared_f · ‎Jun 29 2018

I really want Meraki to allow the user invite to happen via the Meraki MDM Self Service app. Then, the user can just go in an accept the invitation.

jared_f · ‎Jun 26 2018

@DCBUK Unfortunately, there is no other option besides renewing the certificate and re-enrolling. Once the certificate expires, devices must be re-enrolled.

jared_f · ‎Jun 21 2018

I think taking a backup via Apple Configurator 2 and restoring the device would work. In addition, do you have an Airport Express or AP laying around? I would clone the network name and password and try to join the iPad to that. Then the restriction should come off.

About jared_f

jared_f

Community Record

Badges