Thanks for validating. Have attempted a variety of workarounds with no success - really need a an option, but I can't see anything beyond waiting for anew version of the SM agent. ... View more

A few years ago I had assisted a Meraki customer to script profile installations using the agent. Recently, we revisited this, so I'll share my findings with anyone else who may be in a situation where they do have the agent installed but do not have the profile installed.   Before MacOS Big Sur, the "Profiles -I" command could be used to install profiles, but Apple has deprecated this. I can only speculate, but I would assume this falls in line with many changes that Apple has been making lately focusing on user privacy and user knowledge of the permissions that their admins have. This means that if the device does not receive the profile through a DEP enrollment, the only method of installing a profile is via user action.    DEP would be the ideal scenario, but anyone reading this probably knows that ideal scenarios are rare for admins.   Although we can't silently install this anymore, we can utilize the agent to push a script that will prompt the user to install. As a proof of concept we did the following, this will download the profile and present the user with the following screen:                                 Baseline: Machines DO have the agent installed, but DO NOT have the profile   Step 1: Have Meraki support alter your network so that your enrollment profiles do not expire. Without doing so, profiles expire 5 minutes after they’re downloaded, and they will fail to install after 5 minutes. Step 2: Download a non-expiring profile from m.meraki.com Step 3: Wrote a simple script. This was very simple in my case, it was just a proof of concept. The script simply loads the profile into MacOS, and then opens the UI to the exact location where the user can click “install”. You can get fancy here and include an image if you want: #!/bin/bash sudo open photo.jpeg # open a picture file sudo open meraki_sm_mdm.mobileconfig # load enrollment profile to system preferences sudo open -b com.apple.systempreferences /System/Library/PreferencePanes/profiles.prefPane meraki_sm_mdm.mobileconfig # open system preferences profiles, which presents the user with the install option   Steps 4+ follow the process from this document: https://documentation.meraki.com/SM/Apps_and_Software/Deploying_Scripts_in_Systems_Manager_using_Software_Installer    Step 4: Bundled my script and the non-expireing .mobileconfig profile into a .pkg installer file (this doesn’t install anything, its just how we run scripts via the agent) Step 5: Wrapped my .pkg into a DMG Step 6: Uploaded the DMG to Dashboard as an “app” Step 7: Scoped the app, making sure auto install was not selected Step 8: Manually pushed install command   The script can be as elaborate as you want. For example, you could likely use the "Profiles -list" command to check if the profile is installed, and only prompt the user if it isn't installed.   Feel free to reply to my post if there are questions about this.   ... View more

Awesome. I need to check that out. ... View more

@binarydaze, Thank you !   Reset ok by DFU mode and iTunes. The new profile could be installed to replace the previous one. All is in order ! ... View more

Congrats to the winners! ... View more

In my last school, we had a home-grown solution from a developer called Pixels & Digits. They created an export report that would feed Apple School Manager via SFTP nightly, and that would sync owners to Cisco Meraki SM.   My current school syncs ASM from PowerSchool, and then that feeds Systems Manager, though not as well. I get some duplicates, and student and faculty who attrition aren't removed automatically.   What else is everyone else using? We're looking at an SIS change for the fall, and I'd love any feedback. We're located in southern Taiwan, so Asian-language input is a must-have for us, as is highly customizable name fields.   Cheers! ... View more

Yes, I was able to connect them all to iTunes and chose the Restore and Update option and have gotten all but one set up with Meraki installed.   The one I'm having problems with is giving me the error message "Safari could not install profile due to an unknown error"   The only thing I can come up with is that this ipad is connected to a different network that my Surface Tablet that I'm currently using to manage Meraki, but it will not connect to the other network, and is giving me the "The network is temporarily unavailable.  Try again later" error message, which is a lie, since I have about 40 devices currently connected to that network and all are working fine.   Any thoughts on this? ... View more

Great.  Many thanks for the link.  I've used it to create a number of docks to suit our needs. ... View more

I would use this all the time. As a school, we buy our devices annually, so there's typically a lineage of devices by year. For example, this year, all the faculty laptops are MacBook Air 9,1. Our IT office has (2) MacBook Pro 16,1 and one MacBookPro 16,2.    At inventory time, it's great to see where different devices are, and which ones will be supported by new OS upgrades (and which ones won't). Being able to search that is really useful.   Currently, that's our naming convention so we can locate quickly. {type}{model}{last 3 of asset tag}. So, mbpro141482 is easily identifiable as a 14th generation MacBook Pro, 13" model with asset tag ending in 482. ... View more

Happy Birthday! ... View more

1) As far as the requirements go... you need an accessible AD controller with :389 or :636 listening, and an account that can connect to that with permissions.   2) As long as DNS resolves, AD will make its way through the site-to-site VPN. Your routes have to resolve. Make sure you can map a drive, or a similar task like RDP. You can even use AD to handle RADIUS authentication at the remote sites, which is pretty sweet. ... View more

Found another gnome  ... View more

The gnome was here - and @Adoos was the first to find him, congrats! @Adoos I'll be in touch to get your mailing address for your gnome prize.   The gnome is now just a shadow of his former self here - and is safely nestled in my bag, ready to go to work tomorrow. ... View more