Meraki

jared_f · ‎May 3 2018

As @vassallon states, no it is not possible to enforce app configurations. It has been a while since I have used AC2 to "image" an iPad, but could you possibly configure an iPad and create it as the master backup and sync it to all the others? I believe you can use automated enrollment DEP in AC2 for Meraki. Not sure if this would work, but that is the only work around I could think of. ~Jared

jared_f · ‎May 2 2018

Did any of you push the software update command on iOS 11.3? It puts devices in a loop of software update commands, similar if not identical to what you are seeing.

jared_f · ‎May 1 2018

Thanks @CarolineS and Meraki team!

jared_f · ‎Apr 30 2018

Our users have to authenticate with their directory credentials to login. I don't do any other Windows Server administration, but we have them all in different groups broken down from All Employees, Department, and all of the branch offices. I believe AD is synced nightly on Meraki. Once the user assigns themselves the tablet, the appropriate configuration comes down. But, I do see this as an issue for lab or loaner machines.

jared_f · ‎Apr 27 2018

The device has not received its configuration from DEP. As soon as the device enrolls, it will show as pushed.

jared_f · ‎Apr 26 2018

Why is Two Factor Authentication needed? If all devices are SM managed you just have to scope the Classroom profile to the students and teachers. Are you signed up for VPP and DEP? Apple School manager does most the work from my understanding. Not really in education IT so I can't really help. Maybe a K12 admin will chime in.

jared_f · ‎Apr 26 2018

@Jordanw Are you using Apple Classroom yet?

jared_f · ‎Apr 26 2018

Good luck. The only other thing I could think of it to get rid of Safari via a restriction and push a safe browser available in the App Store. For device filtering: I am really a fan of http://www.mobicip.com - they do cost a bit, but there is no appliance and you just push the proxy configuration profile.

jared_f · ‎Apr 26 2018

Also, are you using any filtering solution like OpenDNS or Light Speed on the network side?

jared_f · ‎Apr 26 2018

Unfortunately, this is not possible. What kind of traffic are you seeing? Maybe push out the web content filter payload?

jared_f · ‎Apr 25 2018

Both of them do the same thing. Not sure why there are two text fields.

jared_f · ‎Apr 25 2018

@alexis_cazalaa That is correct. This is not Meraki's fault, but is an Apple limitation. I highly recommend enforcing bluetooth on during DEP enrollment (if you are using it). This ensures it will be locked on.

jared_f · ‎Apr 25 2018

@alexis_cazalaa I just tested it, even though it is turned off at control center, Apple Classrooms still works.

jared_f · ‎Apr 25 2018

I would ping support and see if they could remove it for you.

jared_f · ‎Apr 25 2018

@alexis_cazalaa I believe control center only shuts stops connections until the next day. This feature prevents students from circumventing Apple classroom, the student "toggling" bluetooth off in the control center with this restriction enforced would stop that.

jared_f · ‎Apr 25 2018

@MikeMandalorian This is not possible and my best guess is it will never exist. If Apple allowed you to push credentials to apps, it would probably be agains the EULA that the user agrees to.

jared_f · ‎Apr 25 2018

@MikeMandalorian The footnote/asset tag display on the bottom of the lock screen.

jared_f · ‎Apr 25 2018

The only thing that would be causing this is the IP restrictions on logins.

jared_f · ‎Apr 24 2018

In addition, a few observations: -#1 - The new UI is great. -#2 - Thank you for the asset tag payload with variables -#3 - More support for Mac OS, greatly appreciated -#4 - New restriction setup is great.

jared_f · ‎Apr 24 2018

Best news all day, not only do we get to play with the new UI tweaks in the settings page, but variables are now supported. THANK YOU Meraki SM team.

jared_f · ‎Apr 17 2018

I have not seen this issue. In addition to what others are seeing, are your devices possibly getting a whitelist/blacklist caused by a security policy? This would cause apps to disappear.

jared_f · ‎Apr 16 2018

The only reason VPNs are a concern for us and such a big deal is because all traffic runs through sonic wall at HQ. Adding another VPN connection is a big security concern. It has never been a problem with computers, but I guess iPads are much easier to install VPNs. In addition, security policies are great for this because they trigger both an email configuration and a restriction profile to restrict.

jared_f · ‎Apr 16 2018

Hi Melissa, In the security policies, a checkbox that contains "Configuration Profile Blacklist" and then you could type in names or do a wildcard match. We have to allow users to install configuration profiles because the conference rooms have Apple TVs on there own subnet and they connect to the room wireless. Not that employees are smart enough to install VPNs with profiles, but it would be possible. My apps blacklist would not pick it up, not notifying me and I would probably never notice. Just a handy thing in the Security Policy toolbox. Jared

jared_f · ‎Apr 14 2018

We have gone to the router of designing the software ourselves because it would incorporate directly into our payroll and scheduling software. Payments won't be apart of the first app, it is only going to be check-in/out for aids and doing that via geolocation.

jared_f · ‎Apr 13 2018

@PhilipDAth Thanks for the insights! Our goal isn't to be jerks with restrictions, being a home health care company it is basically sitting with clients and helping them when needed. Most of our nightly aids will do the reading, so allowing them access to iBooks and other business apps (not entertainment - i.e. Netflix) would not be an issue. We briefly talked about it today, but it is an idea we have always been cautious with because of the turn over in aids. If we go this route I believe we will pilot between 10 - 15 different devices, including androids.

About jared_f

jared_f

Community Record

Badges