I tried many solutions online , but finally solved it by signing in to your iPhone using the same apple ID which is in the pop-up. ... View more

Is there a solution for this ongoing issue? ... View more

Hi IT-Tom, add me. You Post heled to find the direction:  In per Device Licening this (Server Error 0x80180001) means the License ist not assigned to the Network whrere it is needed. ... View more

An old thread, but people here may be interested in recently upgraded support for Bitlocker in Systems Manager, from Windows 10 v1803 onwards:   https://documentation.meraki.com/SM/Apps_and_Software/Windows_BitLocker_Encryption_with_Meraki_Systems_Manager ... View more

You can change 'Name' by selecting a device from the 'Device list'. 'Name' and 'Assigned name' will be changed. In the 'Device list', you can see the name you manage by selecting the check box as shown in the picture. If you turn off the 'allow modification of device' checkbox from 'Restrictions' and check 'keep device name up-to-date with dashboard' with the name change, you can completely manage the device's name as the administrator-specified name.   Multiple device names can be changed using API. https://documentation.meraki.com/SM/Other_Topics/Renaming_Systems_Manager_Client_Devices_with_a_.csv_and_Meraki_API_using_Postman_Runner   ... View more

Yes, you can change user password via console as long as Meraki Agent is installed. Having said that, if device is not encrypted, there are ways to bypass it. ... View more

I have always been under the impression that to remove DEP enrolled devices from the network, you need to "Unassign settings" under Systems Manager > Manage > DEP. Which is direct opposite of enrolling them by "assigning settings" in MDM which consumes a license and activating the device establishing the link between the two.   Deleting them from the devices list works for other types of enrollment, ... View more

Found the issue.   Adding "merakismoauth://com.meraki.pcc.unmanaged" under Mobile and desktop applications panel is not noted in the instructions. It is however shown in the screenshot provided that is not very accurate. After I added this, it proceeded to add the owned device and download the wi-fi config. These instructions need to be reviewed and corrected to avoid future service ticket issues.   This is what the instructions provide...     When setup properly, this is how it should look...       ... View more

Thank you for taking the time to reply and explain a lot of this, it's much appreciated!   1. Thank you for clearing up the passcode situation. I was revisiting my prior steps with Apple Business to get DEP going to get the phone in "Supervised" mode. But based on what you are saying, it doesn't appear that will even be worth it if I'm unable to truly lock down the phone beyond clearing out the existing passcode?   2. Definitely understand the situation involving the device being offline (I learned that the hard way with an Android devices that need to be fully unlocked before you can reset a passcode).   While I did review kiosk mode, is that something that could get kicked off remotely or is that again a situation where you need the device in-hand?   Right now it appears my best option is to continue turning off access to work-related apps installed on the iOS device. Locking the device through the "Find My iPhone" is a 50/50 solution as they can easily gain access to the device again using the existing passcode.   Sounds like I'm going to be facing limitations on both Android and iOS regardless. ... View more

I've used the steps below with other customers to install all sorts of packages. If you use AnyConnect, Umbrella, etc, you're probably familiar with them   You can place all of the files you wish into a DMG. Alternatively, a ZIP will work just as well     Open Terminal   Using mkdir Create a Directory. I’ve used InstallerPackage as the Example   In Terminal Type     cd InstallerPackage mkdir Scripts mkdir Content cd Scripts touch postinstall     Copy the DMG  you need into the Content Folder   Using a text editor, edit the postinstall file and paste in your script (an example script is at the end of this post) that will move files in /tmp to where ever you need to     chmod a+x postinstall cd ..     Build the package     sudo pkgbuild --identifier com.meraki.sophosinstaller --root Content --script Scripts --install-location /tmp com.meraki.sophosinstaller.pkg pkgbuild: Inferring bundle components from contents of Content pkgbuild: Adding top-level postinstall script pkgbuild: Wrote package to com.meraki.sophosinstaller.pkg     Double Note: ensure that there is a space between /tmp and com.meraki.sophosinstaller.pkg   An example postinstall:     #!/bin/bash dmgPath="/tmp/YourDMGName.dmg" mountPath="/Volumes/YourDMGMounted" currentuser="$(id -un)" usersAppDir="$(sudo -u $currentuser echo $HOME)" /usr/bin/hdiutil attach "$dmgPath" -nobrowse -quiet if [[ -e "$mountPath" ]] then cp -r "$mountPath"/"YourApp.app" /Applications/"YourAppName.app" fi umount "$mountPath" rm -rf "$dmgPath" # insert the commands that you need to # provision your application exit 0     This may take a few attempts to get right. So, I'd install the installer manually first before deploying via SM   Also note: The name of the bundle ID that you use in SM when creating the custom app HAS to match the bundle ID of Sophos, else SM has no way to know that it's been installed correctly.   ... View more

I did find that I can have both profiles on the same bunch of devices.  One for the wallpaper and the other with what I had already built, so this will work for now...   ... View more

Nothing has changed in the last 2 years. Windows 10 support is non existent. ... View more

According to Microsoft the code scanner app ID is com.apple.barcodesupport.qrcode, but it doesn't come up in the list when I search for it in Mobile App Config. ... View more

This is not entirely true, you can specify user created tags as "Default" ones under Systems Manager > General.     ... View more

Yes I'm not too concerned about losing anything - data is all encrypted etc - It's more the discovery that Windows MDM only works at all when the specific user account that enrolled the device is logged in. This seems remarkably limited - its user enrolment and management, not device. ... View more

@beks88  At this stage it looks as though it not supported as SM only shows sync options for ASM not ABM. I would say Meraki are working on this.     @lpopejoy  No it requires either ABM or ASM both are free to join. ABM simply requires a DUNS number ot join and ASM you have to prove that you are a school.  ... View more

Hey I ended up finding a solution for anyone looking at this thread Meraki's documentation shows the following: msiexec /i Setup.msi /qn ORG_ID=222222 ORG_FINGERPRINT=1234567890abcdef USER_ID=111111   If you are pushing it out from Meraki, once you have the Setup.msi file uploaded the installation arguments are as follows: /qn ORG_ID=222222 ORG_FINGERPRINT=1234567890abcdef USER_ID=111111 The documentation is very misleading as you have to omit the filename for it to work ... View more

We don't enroll Macs via DEP but with iPads profiles for iOS 12 and iOS 13 are not completely interchangeable. We had a case when iOS 12 device wouldn't activate with iOS 13 profile or other way around. We do skip as much steps as possible though, so I think the reason might lie in additional steps introduced in iOS 13. iOS 13 profile works fine with iOS 14 device though. ... View more

Thank you! That makes so much sense. I knew I was just looking too closely at it.  ... View more

How do you enroll iPhones in MDM? DEP, User Enrollment or good old profile enrollment via m.meraki.com? We have had O365 with MFA and MDM for a couple of years now, never had any problems. What kind of restrictions, settings and credentials are you pushing with your profile?   As mentioned below Outlook is a preferred option here, but our users use native Mail as well. It does sometimes require mail account reset but it has nothing to do with MDM and happens on both enrolled and not enrolled devices. ... View more

You may find this explanation of how the HLR functions helpful in explaining the relationship between IMSI, SIM and MSISDN(s). https://nextm2m.com/faq/answers/about-m2m/what-is-home-location-register-hlr/  ... View more

I wasn't able to get ProfileCreator to work as it wouldn't load a Google font file. This appears to be a known bug for ProfileCreator (https://github.com/ProfileCreator/ProfileCreator/issues/189) And ProfileCreator isn't being actively updated.   I was able to follow the steps outlines in this Meraki documentation (https://documentation.meraki.com/SM/Profiles_and_Settings/Using_Custom_Apple_Profiles_with_Systems_Manager) to create a profile, upload, and deploy the fonts I needed to Macs. Basically use Apple Configurator 2 from the App store to create a profile to upload to Systems Manager. ... View more

Well it has become abundantly clear that you don't have an answer for the problem.  And that is ok, neither do we which is why we posted here.  But what isnt ok, is replying with unhelpful comments.  So please, stop wasting our time.  Find some other posts to troll.  For the record the FFIEC (which is what the federal compliance governing body requires us to adhere to) states: For institution-owned devices, the institution should have the ability to manage the remote devices. The following controls should be implemented: ... Remotely disable or wipe the device in the event of theft or loss ... https://ithandbook.ffiec.gov/it-booklets/information-security/ii-information-security-program-management/iic-risk-mitigation/iic15-logical-security/iic15(d)-use-of-remote-devices.aspx     ... View more

If you recover the device, Apple will unlock it for you. Device wipe is a great feature, we use it all the time. ... View more