Thanks! I don't know how I missed it! ... View more

https://discussions.apple.com/thread/3963202   Seems to be some good info there, it is a little old. I would persoanlly go the SM route, blocking ports that iMessage uses could interfere with other traffic.   ... View more

I believe so. Why is the certificate such a big issue? It only takes 2 minutes to make/renew!   Also, I believe that this distinguishes MDM traffic between different servers. ... View more

@DBHS When doing the setup make sure the check mark to "activate" the device is not checked. Then go into deploy.apple.com (DEP) and assign it to your Meraki server (serial # usually works best) > set prestage enrollment in Meraki (make sure this is done before setup on the device is started.   Jared ... View more

we use JAMF as our MDM. I think we'll give this a shot. ... View more

Unfortunately, they could do nothing on their end. No way of pulling us up as a customer and zero record of our organization even existing. I am going to give it another try tomorrow - I will probably give sales a call and see what pricing they could give us for 25 devices. Thanks for chiming in. ... View more

Thanks,   System Manager licenses RRP is around $40 USD per year   But at that Price, I Will give it a try after my free 30 days trial.   LD      ... View more

@Mel Unfortunately, no I do not think they will offer a home suite. We ran into the same issue - it would have cost us hundreds just in device licensing for Meraki hardware. While I would love to have it, that is obsessive for my home network. I installed a Netgear System last year, but we were not happy with it, I ended up switching to Ubiquiti and just finished the install of all our new hardware and access points yesterday. ... View more

@ScottS Do you possibly have the managed app config for the Meraki MDM app for iOS? I am trying to have location services configured when the user opens the app for the Frost time.    Thanks, Jared ... View more

@ScottS That sounds about right. I don’t restrict the user changing the wallpaper (which I know I can), so setting it everyday works for us. Eventually they just stop setting it to what they want because the MDM changes it right back. ... View more

@Mr_IT_Guy I think Maui may need his own profile on here... ... View more

@jared_f   Just checked. Profile manager does in fact have an option to create these custom settings. Exactly what I was looking for. I will keep the tool you mentioned as well just in case down the line I need a second option.    Thanks for the help! ... View more

Do you want to give the user the device and have them perhaps go through DEP... if so there could be a work around.     ... View more

Our nearest Apple store is 2 hours away.  We normally buy online.  I'll try the 800 number and see how far I get. ... View more

+1 to keeping this Meraki specific.  ... View more

Thank you CJ!    Don’t take me the wrong way.  I enjoy working with Meraki products.  You get the best feedback from customers that are passionate about your product.  😁 ... View more

You also have to be sure you renew the certificate using the SAME Apple ID. If you're like us there's an Apple ID for every day of the week because Apple forced you to make different ones for different purposes when VPP first came into existence.  If you renew using the wrong one you'll have to re-enroll.  Been there, done that.  Fortunately, I caught the error before I got more than 300 devices into it so I only had to re-enroll those. ... View more

I love this idea! Thanks for spearheading, @Mr_IT_Guy! ... View more

check your licensing, maybe you are on a Legacy free account which doesn't permit that ?   Organization -- Licence Info  ... View more

We have also run into this roadblock. Luckily we had someone that was capable of coding and created us a "Self Service" portal. Users go there to get apps, books, profiles, etc. Anything that gets installed on the device becomes managed.   I can not think of a workaround for VPP books, but have you tried adding PDF and iBook files into the Meraki MDM app using a "Backpack" configuration profile? Works for some of our needs.     ... View more

You can block and whitelist apps with that respective restrictions profile. If you want only managed apps (apps you will be able to remove from Dashboard) on the device, you will need to add those and scope them to either auto-install or have the user install in the Meraki MDM Self Service Portal. On devices that call for restrictions regarding content, I prefer not to go the route of disabling the app store. I instead scope out a whitelist profile and have a policy notify me of membership change if a user installs a "blacklisted app". I basically have a restrictions profile setup that is tripped and installed by that policy and the device becomes unusable until the user (a) removes the app and waits until and apps refresh takes place for restrictions to be taken off or (b) sees me, and I take the restrictions off by temporarily excluding them from profiles, deleting the app and re-installing the correct configs.    Seems to be working in my environment. Unfortunately, I can't limit all apps, but people using a VPN to get around corp filters is an issue.    Jared   ... View more

@CarlosDMS Apple got rid of the feature of installing and locking individual profiles from the MDM. All profiles are installed under "Meraki Management" and if the device is not enrolled in DEP then that profile cannot be locked/forced on the device.    ... View more

@Diane I did some more investigating with my test devices and realized that what I am proposing is not possible. The only thing I could think of is to set up the whitelist and also create a policy that looks for unauthorized apps that would trigger a config to install. Here is what it would do:   Student device would have a whitelist of apps, have the app store available to update apps and download any whitelisted apps (the ones in your Meraki App/Catalog). Let's say a student installs a "blacklisted" app, it will look like it is about to install and then it will just pop away (as expected with the whitelist profile). The next time the device inventory updates in Meraki they will be considered non-compliant with the whitelist policy. I would have a configuration profile that removes the camera, safari, any anything else you want to remove to force them to have to see you. You would have to exclude them from the configuration and remove the app.    Until Meraki updates and allows you to push mass updates there are only two options. It would be nice if it was something we could set to occur at a specific time (midnight for example).  Jared ... View more