Is there a solution for this ongoing issue? ... View more

If you are just looking to block mass storage USB devices you can use the following profile <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadDescription</key> <string>Configures Allowed Media settings</string> <key>PayloadDisplayName</key> <string>Allowed Media</string> <key>PayloadIdentifier</key> <string>9D5EA197-E941-48CD-84BA-28373017A52C.com.apple.systemuiserver.2C31DE6A-E143-4800-ABD4-369EA4474521</string> <key>PayloadOrganization</key> <string>MegaCorp</string> <key>PayloadType</key> <string>com.apple.systemuiserver</string> <key>PayloadUUID</key> <string>2C31DE6A-E143-4800-ABD4-369EA4474521</string> <key>PayloadVersion</key> <integer>1</integer> <key>logout-eject</key> <dict> <key>harddisk-external</key> <array> <string>deny</string> <string>eject</string> </array> </dict> <key>mount-controls</key> <dict> <key>harddisk-external</key> <array> <string>deny</string> <string>eject</string> </array> </dict> <key>unmount-controls</key> <dict> <key>harddisk-external</key> <array> <string>deny</string> <string>eject</string> </array> </dict> </dict> </array> <key>PayloadDescription</key> <string>USB Management</string> <key>PayloadDisplayName</key> <string>USB Settings</string> <key>PayloadIdentifier</key> <string>9D5EA197-E941-48CD-84BA-28373017A52C</string> <key>PayloadOrganization</key> <string>MegaCorp</string> <key>PayloadScope</key> <string>System</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>9D5EA197-E941-48CD-84BA-28373017A52C</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </plist> ... View more

Wowww, this is a great SM question.   @jm_peterson what exactly your script is doing? It could be that you just haven't added any reportable actions into it. If it's not installing anything, but just running 'echo test', it's likely that this is the expected behavior. SM just acting as a deployment server to push down the packages, then the separate reporting mechanism reports the installed software. Similar to how Apple Remote Desktop would work, in that it has a push package functionality, and a generate report for installed software functionality.    Also, if you post the script, then people on here could run it to see if we experience the same results. Also, screenshots of your outputs would be swell for even more context.    That being said, I would check in with Apple Business Support, see if they can get you to an engineer who will be able to lookup the definitive answer to this, as I suspect that would be the quickest way to get an answer. Especially based on the big banner in the doc you linked 😅 ... View more

I had an open case (over a year) on this and support (thanks) upgraded the SM Agent. ... View more

@davidson2020 I think the thread you are looking for might be https://community.meraki.com/t5/Endpoint-Management-Systems/Anyone-else-seeing-Unverified-Certificates/m-p/62026#M5509  Maybe that shouldn't effect is at play.  ... View more

The easiest way would be to completely bypass Systems Manager and use a Software Management software that actually works like Munki. ... View more

Sorry about the sneaky delivery of that feature. We are currently working with the Documentation team on a better system for announcing and documenting minor features/improvements.    Noah Salzman Product Manager for Meraki SM ... View more

Thanks @jm_peterson I thought about using tags, unfortunately we have some settings in a default profile that is applied to all devices. (Stupid move in hind site) For now, I will just move them all to a network with no profiles. I also opened a case with support. Maybe if they hear us asking for it they'll add a quarantine function to the API.   I got an update on my open case and they stated there is not currently any support for quarantine/selective wipe via the API. The support tech could not give me an ETA and did not state whether this was on the roadmap. He only suggested that I use the "Make a Wish" link to request the feature, which I have done. Hopefully this is a feature that they will enable soon. ... View more

@MelissaI would love to be apart of this as well. I tried to send you a PM but it appears that option is absent on your profile. ... View more

@jm_peterson  The overview section of systems manager will show a break down of OS versions, you could manually click on each version and apply a tag that way. You would have to constantly keep it up to date though.  ... View more

We are deploying Macs through DEP since August 18' and everything works fine, agent and profile are being installed OTA, you just need to add the agent to your Apps enrollment as described on the page posted by @PaulK ... View more