Meraki

jared_f · ‎Jan 11 2018

From my understanding the Apple User Scoped profiles are only used for shared devices in the classroom. Navigate to Systems Manager > Settings > Click Plus Button > Click "Meraki Managed Profile" > Add Settings > VPN > Configure and Scope. Here is some images to help: ~Jared Find this helpful? Click the Kudos button!

jared_f · ‎Jan 10 2018

My whole home network has been getting re-done for the past year and a half. Currently using two access points to provide our 1000/1000 fiber connection to my users. My goal is to finish running new ethernet and phone wires to select location to prepare for a VoIP transition in the future. 2018 Plans: -Put fiber and coax in new conduit being ran to telco pole. -Run seperate fiber feed to our garage for internet and VoIP connection for intercom and phone. -Replace our current surveillance system (hoping to buy some Meraki cameras). -Re-do my service loops to our phone punch down block (I did individual loops, looks shabby to me). -Move voice services to an IP phone provider. Here is my current setup - I did not take the pictures before I started working on it but there was no rack or telephone box before Also, at the office I am hoping to convince IT that they need a rack, a real router, and some new switches! I hope for your vote! Jared

jared_f · ‎Jan 10 2018

https://discussions.apple.com/thread/3963202 Seems to be some good info there, it is a little old. I would persoanlly go the SM route, blocking ports that iMessage uses could interfere with other traffic.

jared_f · ‎Jan 8 2018

Depending on what method they use, if it involves touching the device, take the time to setup DEP. If the phone ever gets wiped, it won't require enrollment to happen again.

jared_f · ‎Jan 8 2018

I took some of my unsupervised devices that were not in my DEP and added them to DEP with the new Apple Configurator. Any DEP device can be restored from an unsupervised or supervised backup (iCloud or iTunes) because DEP pushes the enrollment payload after the restore wizard. This cannot be done if you are just using Apple Configurator to add supervision. Device must be enrolled in DEP and have prestage enrollment setup in Meraki in order to complete this.

jared_f · ‎Jan 5 2018

I believe that is there goal. That is possible, if the device is in DEP and unsupervised backup can be used. This method does work in Apple Configurator.

jared_f · ‎Jan 5 2018

@DBHS When doing the setup make sure the check mark to "activate" the device is not checked. Then go into deploy.apple.com (DEP) and assign it to your Meraki server (serial # usually works best) > set prestage enrollment in Meraki (make sure this is done before setup on the device is started. Jared

jared_f · ‎Jan 5 2018

@PhilipDAth When I was setting of DEP I spoke directly with the buisness team at my Apple store. While the buisness number is great for support, the local team at your local Apple is the best. It only took them 3 days to get us all setup with VPP and DEP. I just feel there is a lot of mis-conceptions about Apple in the enterprise.

jared_f · ‎Jan 5 2018

@Melissa It is 100% possible to take an unsupervised backup and install it on a DEP device. I have taken 20+ unsupervised devices and switched them over to DEP with no loss in data. DEP forces the user to install the MDM profile after the backup is installed. Personally, Apple has never made it clear on how to do this and it makes system admins find it themselves.

jared_f · ‎Jan 4 2018

@PhilipDAth I agree in some cases. But, most of the users I deploy to are used to iOS and it is a reliable and good choice. With the new Apple Configurator you can enroll devices into DEP not even bought from Apple (with the 30 day period that they can be unenrolled by the user). Usually you don't even have to touch DEP if you just have it auto-assign to your server.

jared_f · ‎Jan 4 2018

If you are ever deploying Apple devices and are using an MDM, make sure you get VPP and DEP. They are great products and are FREE!

jared_f · ‎Jan 4 2018

So, if you use Apple Configurator and you prompt enrollment that way and the user goes to restore from a backup, enrollment will be totally wiped and never hit the phone. The thing about DEP which is great is that supervision and the MDM profile become mandatory! Once your devices are in the DEP portal and assigned to Meraki go to the DEP section (in Meraki) and assign prestage settings. Here are mine (notice that supervision and the MDM profile are mandatory). *Note: You must assign settings before the device starts setup - if no, the settings will not be recived. The user will navigate through prestage enrollment and the user will be prompted to restore from iCloud or an iTunes backup, allow them to do this... after that is completed they will be prompted with a "Remote Managment" screen and they will be asked to imput their AD credeintials (if you set that up) which will supervise, install the MDM profile, and install the Meraki app. *As @PhilipDAth you need to have VPP setup and the Meraki app scoped to the devices with auto install to have it pop down as managed. Hope this helps, Jared

jared_f · ‎Dec 31 2017

As a side note, it does not have nearly the management feature that Meraki has!

jared_f · ‎Dec 31 2017

If Meraki is out of your price point, take a look at Jamf Now. I try not to advertise other products on forums, but it is understandable that you are looking for a home use management that is not a lot of money.

jared_f · ‎Dec 18 2017

We would second the creation of this feature. Maybe something like "Automated Management" so every time the device checks-in it will turn off. We could also see this being useful for setting wallpapers (currently I have a time tag to allow users to fall in and out of the configuration each day). Jared

jared_f · ‎Dec 13 2017

@Mel Unfortunately, no I do not think they will offer a home suite. We ran into the same issue - it would have cost us hundreds just in device licensing for Meraki hardware. While I would love to have it, that is obsessive for my home network. I installed a Netgear System last year, but we were not happy with it, I ended up switching to Ubiquiti and just finished the install of all our new hardware and access points yesterday.

jared_f · ‎Dec 13 2017

Yes, once you push this out and your user enrolls they will be forced to use FileVault. The only way they could get out of it is removing the MDM profile, but that is a whole other discussion.

jared_f · ‎Dec 13 2017

@Mel So, once everything is setup your user will install the Meraki MDM Profile (I also recommend the agent be deployed and the admin PKG when this is all being done). Once the user installs the profile, you can scope out the FileVault configuration profile. This will encrypt the hard drive. The "key" will be stored under your Meraki server and the user will have to do nothing on their end once the profile is deployed.

jared_f · ‎Dec 13 2017

Check this out @Mel: https://documentation.meraki.com/SM/Profiles_and_Settings/Using_File_Vault_2

jared_f · ‎Dec 13 2017

@Mel Meraki is great for security because you can track compliance of devices. You can enforce passcode policies and lock down the hard drive with configuration profiles. You can clear iOS device passwords, but you cannot on Mac. But you can push down a pkg that creates a local admin account on the computer and that would always allow you to reset any users password if necessary (assuming you have the device on hand).

jared_f · ‎Dec 12 2017

I do user based licensing for apps like notability.

jared_f · ‎Dec 11 2017

VPP is mandatory to have silent app installs. If you are setting VPP up I recomend you do user based licenses because they are easier to track and manage (in my opinion). Jared

jared_f · ‎Dec 6 2017

@akuma_xxx Your predecessor probably used a tool called mcxToProfile and uploaded the custom configuration profile to Meraki and scoped it out to the proper devices. Here is the tool: https://github.com/timsutton/mcxToProfile I do stress this to you - Apple has started to move away from MCX and is highly encouraging (and eventually is going to force you) to stick with profiles. This is what I have been doing when I have been overhauling Mac OSX profiles: Get a copy of Mac OSX Server and set up a local version of profile manager. You can create way more profiles in profile manager than Meraki offers (and I guarantee that are 100% supported by Apple as it is there framework and software). Please let me know if you have any questions or need clarification, Jared Flitt Find this helpful? Click the kudos button. Thanks!

jared_f · ‎Dec 5 2017

I tested attempting to add our organization from DEP in my Apple Configurator and I ran into the same error. I believe Meraki will have to open the supervision identity to us in order to use it. Not ideal, but luckily I can push most things via Meraki.

jared_f · ‎Dec 4 2017

I would not mind this - as I am typing this I am going to share the secret santa idea to the SM board because I feel it did not get enough attention - I just saw it out of the corner of my eye lol. Jared

About jared_f

jared_f

Community Record

Badges