Interesting, is there also a similar approach for iOS devices? ... View more

With real access I meant, do you have a hybrid version of AD and can remote access to the desired Windows server or only the web page?   If so, you could also try to activate the authentication via SM Agent or MX (if there is one in use) https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication#Active_Directory_Integration   But as you already mentioned in another reply, there is a newer docu which mentions Azure AD, I would try my luck with support than ... View more

@PaulF can you confirm the docs about Azure AD with DEP are still valid and not supported? ... View more

You need to differentiate   To my understanding, federated authentication is only required if you need the usage of managed Apple IDs. Managed Apple IDs are only required if you want the user to enroll via User Enrollment with his private device or you need to push books and/or apps which are user assigned.   If you only have Azure AD as identity provider and no real access to the Domain Controller server, your only option is Meraki hosted accounts. The docs haven't changed this "warning" the last 4 years since my first touch with Systems Manager. Maybe you can contact support to be sure if it's finally supported. I personally never tested it.   But if you want to test it, I think you'll currently need a supervised device which is coming from Apple Business Manager     ... View more

Enrollment redirect URL is just for a custom designed log in page upon Authentication.     The Meraki docs still state, that Azure AD through DEP isn't supported, maybe someone from support can confirm. https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication     However, if you are using User Enrollment there is currently a known issue I reported a few days ago https://community.meraki.com/t5/Mobile-Device-Management/iOS-16-iPad-OS-16-already-known-issues/m-p/160150#M9593     I'm referring to "known issue" since it has already been discovered by Microsoft in terms of updating a "user enrolled" device https://techcommunity.microsoft.com/t5/intune-customer-success/ios-ipados-15-devices-enrolled-with-user-enrollment-are-unable/ba-p/3621141 ... View more

There was an announcement 🙂   https://community.meraki.com/t5/Feature-Announcements/Systems-Manager-iOS-16-and-Android-13-support-with-new-features/ba-p/159393   I found an article from Microsoft Intune where a similar error is reported. It seems Apple didn't patched it in the final release. Microsoft talks about an issue with updating "user enrolled" devices, but it seems also to affect new enrollments. ... View more

You need to register your organization with Apple on business.apple.com and ideally ask your supplier if they support Apple Automated Device Enrollment (formerly DEP) If not, there are also ways to get devices manually into Apple Business Manager, but I would recommend you to read the docs from Apple   The pro of Apple Business Manager is, your devices are supervised and you can read the bypass code for Apple ID locked phones ipads ... View more

What's your usecase? With Apple Automated Device Enrollment you can always kill users Apple ID after they return the device to you ... View more

Thanks for your reply.   The devices are supervised, so a force update should work without user interaction. There's also no passcode on the phones. Some other vendors are able to force the update.   You mentioned "over cellular enabled" is there a way to toggle this through MDM? I already deployed a profile which allows Settings App to use cellular. ... View more

I think Apps aren't allowed to do a restart of the phone.   The customer specified a bit more his wishes, we need to clear daily the browser cache and history. I know Chrome offers an AppConfig, but I don't really want to register just for this purpose on Google Admin.   I few months ago I stumbled over a manageable Browserapp but can't really find it anymore. ... View more

@PaulF is there a way to see open wishes, so we can vote on them and maybe push one or another up? ... View more

Actually, I now need this to work on Web-Clips aswell.   Any progress @VictorM? ... View more

Google is finally supporting Samsung devices through Android Zero Touch. In this case go away from Knox Mobile Enrollment and set up with Android Zero Touch.   https://documentation.meraki.com/SM/Device_Enrollment/Android_Zero-Touch_Enrollment   I don't think Meraki will put any more effort in this, because you can set up the whole Android Enrollment through Android Zero Touch regardless the manufacturer   I tried different ways with KME and SM, but I keep stucking on the Enrollment Code. It wants me every time to put it in manually.   Best regards ... View more

@JayJun Follow this thread   B2B custom Apps - Business Manager  ... View more

Contact support and they shall unlock the B2B Apps feature like in my second image ... View more

Nice to be a part of this success :).   But since there is Jamf Pro in competition, this chart implies the Author compared only Apple devices ;). ... View more

@MCrowther could you add some more in depth to this? ... View more

I think I have a bit other problem with this setting.   A few weeks age I've activated the delay software update for 90 days, because of Xamarin Bug with iOS 14.2 & 14.3 And now the bug has been resolved with iOS 14.4 and I disabled the "delay software update" but the users still aren't able to update. Even when I push (force update) it seems like it doesn't work. This is affecting iPhones on my side.   As side note, some of my iPhones show on device details, they need to update to iPadOS 14.4 😄 ... View more

Had to do the same thing a few months ago. You will have to copy paste every setting manually. There isn't even a possibility to download the settings as a mobileconfig file.   Open two browser tabs on two screens and start 🙂 ... View more

You can't delete privately installed Apps. You can blacklist them only, so the user won't be able to open them.   Another possibility, disallow App installation at all. ... View more

At first there are Apps, that aren't designed for both device types and never will be, because they have workflows which fit only with an iPhone or iPad, but you are still able to install them on both platforms.   Or you buy an App for your users and want them only to use the App on an iPad   Or maybe you want different restrictions for iPad users and iPhone users.   There are several scenarios where this would be helpful, without the need in managing these types manually.       ... View more