The easiest way would be to completely bypass Systems Manager and use a Software Management software that actually works like Munki. ... View more

@L4d1k While I have an ever-growing list of things I wish Meraki could do, this feature was silently implemented. If you enable the System Preferences Payload at the bottom you can list the Third Party System Preference Panes you wish to enable. You can use http://apetronix.com/find-pane-id-for-system-preferences-app/ to get the pane-ID for the apps you need to whitelist.  ... View more

@MichelRueger As it stands now the api is limited in that sense and you cannot manipulate custom profiles. It seems the functionality is limited to what you can edit if you clicked on a device(s) page in Systems Manager, or return data on all the clients on a SM network.  I have used it extensively for those tasks if you need any additional information.  ... View more

@wperry1 I ran into the same issue. The two options I came up were 1. What you are doing by moving the device(s) to a new network. 2. Tie access to x,y,z to tags and then as apart of your termination script loop through the tags and delete all of them. Below is an example of that I used in python. This way all the access was removed but the device was still managed. You can play with the hostname variable too so that they show up something like `Termed-useraccount`. def get_all_tags (): url = "https://api.meraki.com/api/v0/networks/%s/sm/devices" % network_id querystring = { "serials": serial_number } payload = "" try: r = requests.request("GET", url, data=payload, headers=meraki_headers, params=querystring) r.raise_for_status() except requests.exceptions.HTTPError as err: print (err) sys.exit(1) machine_info = r.json() global users_machine_id, machine_tags users_machine_id = machine_info['devices'][0]['id'] machine_tags = machine_info['devices'][0]['tags'] def update_meraki_hostname (): print ("Attempting to update hostname in Meraki.") headers = { 'X-Cisco-Meraki-API-Key': meraki_api_key, 'Content-Type': "application/json", } data = {"serials":serial_number, "deviceFields": {"name":host_name} } requests.put('https://api.meraki.com/api/v0/networks/%s/sm/device/fields', headers=headers, data=data) % network_id def meraki_tag (action, ttype): url = "https://api.meraki.com/api/v0/networks/%s/sm/devices" % network_id args = { "updateAction":action, "tags": ttype, "serials":serial_number} payload = "" headers = { 'X-Cisco-Meraki-API-Key': meraki_api_key, 'Content-Type': "application/json", 'cache-control': "no-cache", } try: r = requests.request("PUT", url, data=payload, headers=headers, params=args) r.raise_for_status() except requests.exceptions.HTTPError as err: print (err) def meraki_tag_loop (): for t in machine_tags: meraki_tag ('delete', t) ... View more

@MelissaI would love to be apart of this as well. I tried to send you a PM but it appears that option is absent on your profile. ... View more

@vassallonUnfortunately that didnt work. I was looking for a way to automate this for Mojave so custom pppc/tcc/kernel extensions could be applied as users update. Since there is no solution I threw one together. Disclaimer, python is not my strong suit so there is probably a more efficient way to do this but this is working for me. You just need to replace YOURSMNETWORKID with your network_id, yourreallylongapikey with your api key, and the tag name with whatever you want the tag to be.  Hopefully this is of use to someone. ¯\_(ツ)_/¯ import requests import json meraki_url = 'https://api.meraki.com/api/v0/networks/YOURSMNETWORKID/sm/devices' aki_key = 'yourreallylongapikey' search_models = ['OS X 10.14', 'OS X 10.14.1', 'OS X 10.14.2', 'OS X 10.14.3', 'OS X 10.14.4', 'OS X 10.14.5'] meraki_payload = "" meraki_headers = { 'X-Cisco-Meraki-API-Key': aki_key, 'cache-control': "no-cache" } def tag_the_machines (serial_input): url = 'https://api.meraki.com/api/v0/networks/YOURSMNETWORKID/sm/devices/tags' args = { "updateAction": "add", "tags": "Mojave", "serials": serial_input } payload = "" headers = { 'X-Cisco-Meraki-API-Key': aki_key, 'Content-Type': "application/json", 'cache-control': "no-cache", } try: r = requests.request("PUT", url, data=payload, headers=headers, params=args) r.raise_for_status() print ("Tagged" + '' + serial_input) except requests.exceptions.HTTPError as err: print (err) def check_key(dict, key): if dict.has_key(key): global batch batch = dict[key] else: print ("Batch not key present") def get_all_machines (): url = meraki_url payload = meraki_payload headers = meraki_headers r = requests.request("GET", url, data=payload, headers=headers) global all_machines all_machines = r.json() check_key (all_machines, 'batchToken') create_mojave_dict() def send_batch_request (): url = meraki_url payload = meraki_payload querystring = { "batchToken": batch, } headers = meraki_headers r = requests.request("GET", url, data=payload, headers=headers, params=querystring) global all_batch_machines all_batch_machines = r.json () create_mojave_batch_dict() def create_mojave_dict (): serial_number = [] os_name = [] for m in all_machines["devices"]: serial_number.append(m["serialNumber"]) os_name.append(m["osName"]) machine_dict = dict(zip(serial_number, os_name)) global mojave_machines mojave_machines = [] for s in search_models: for k, v in machine_dict.items(): if v == s: mojave_machines.append(k) for m in mojave_machines: tag_the_machines(m) def create_mojave_batch_dict (): serial_number = [] os_name = [] for m in all_batch_machines["devices"]: serial_number.append(m["serialNumber"]) os_name.append(m["osName"]) machine_dict = dict(zip(serial_number, os_name)) global mojave_batch_machines mojave_batch_machines = [] for s in search_models: for k, v in machine_dict.items(): if v == s: mojave_batch_machines.append(k) for b in mojave_batch_machines: tag_the_machines(b) if __name__ == '__main__': get_all_machines() send_batch_request() ... View more

@vassallon It was definitely a good idea. But it appears the security policy cant scope worth a damn and returns this. ... View more

@sshortThanks for the response. That's the way I have been doing it and it works flawlessly. Granted I would like Meraki to have provided this since it was needed, several months ago, but this post is about them sliding in the ability to do so without any information about it. Using Jamf's tool works great, is intuitive, and has plenty of documentation. The "feature" we were given is confusing and has zero information about it. ... View more

Was there ever more information posted on this? ... View more

 @jcapitan I ended up creating mobileconfig files for different roles, and removing system preference management from the profile. So I apply the other settings I need for each role and then adjust the settings in following mobileconfig for each role. <?xml version="1.0" encoding="utf-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadIdentifier</key> <string>com.yourorg.prefpanes</string> <key>PayloadRemovalDisallowed</key> <true/> <key>PayloadScope</key> <string>System</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>72F73F53-A5E6-48CE-AB73-27641F526EF7</string> <key>PayloadOrganization</key> <string>YOURCOMPANYNAME</string> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadDisplayName</key> <string>Preference Panes</string> <key>PayloadContent</key> <array> <dict> <key>PayloadType</key> <string>com.apple.systempreferences</string> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadIdentifier</key> <string>com.yourorg.profile.prefpanes</string> <key>PayloadEnabled</key> <true/> <key>PayloadUUID</key> <string>d264dfc2-2b01-f0d0-24e2-9c98d6f3239b</string> <key>PayloadDisplayName</key> <string>Preference Panes</string> <key>EnabledPreferencePanes</key> <array> <string>com.apple.preferences.Bluetooth</string> <string>com.apple.preference.datetime</string> <string>com.apple.preference.desktopscreeneffect</string> <string>com.apple.preference.digihub.discs</string> <string>com.apple.preference.displays</string> <string>com.apple.preference.dock</string> <string>com.apple.preference.expose</string> <string>com.apple.preferences.extensions</string> <string>com.apple.preference.general</string> <string>com.apple.preference.ink</string> <string>com.apple.preference.keyboard</string> <string>com.apple.Localization</string> <string>com.apple.preference.mouse</string> <string>com.apple.preference.network</string> <string>com.apple.preference.notifications</string> <string>com.apple.preferences.parentalcontrols</string> <string>com.apple.preferences.password</string> <string>com.apple.preference.printfax</string> <string>com.apple.preference.sound</string> <string>com.apple.preference.speech</string> <string>com.apple.preference.spotlight</string> <string>com.apple.preference.trackpad</string> <string>com.apple.preference.universalaccess</string> <string>com.apple.preferences.appstore</string> <string>com.apple.prefs.backup</string> <string>com.apple.preference.energysaver</string> <string>com.apple.preference.security</string> <string>com.apple.preferences.sharing</string> <string>com.apple.preferences.softwareupdate</string> <string>com.apple.preference.startupdisk</string> <string>com.apple.preferences.internetaccounts</string> <string>com.apple.preferences.wallet</string> <string>com.apple.prefpanel.fibrechannel</string> <string>com.apple.Xsan</string> <string>com.gnnet.Jabra</string> </array> <key>DisabledPreferencePanes</key> <array> <string>com.apple.preferences.internetaccounts</string> <string>com.apple.preferences.configurationprofiles</string> <string>com.apple.preferences.icloud</string> <string>com.adobe.flashplayerpreferences</string> <string>com.oracle.java.JavaControlPanel</string> </array> </dict> </array> </dict> </plist>  The following article is helpful for getting the preference pane id for third party applications. http://apetronix.com/find-pane-id-for-system-preferences-app/  ... View more

My apologies for not clarifying. MacOS. ... View more