Interesting, is there also a similar approach for iOS devices? ... View more

With real access I meant, do you have a hybrid version of AD and can remote access to the desired Windows server or only the web page?   If so, you could also try to activate the authentication via SM Agent or MX (if there is one in use) https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication#Active_Directory_Integration   But as you already mentioned in another reply, there is a newer docu which mentions Azure AD, I would try my luck with support than ... View more

@PaulF can you confirm the docs about Azure AD with DEP are still valid and not supported? ... View more

You need to differentiate   To my understanding, federated authentication is only required if you need the usage of managed Apple IDs. Managed Apple IDs are only required if you want the user to enroll via User Enrollment with his private device or you need to push books and/or apps which are user assigned.   If you only have Azure AD as identity provider and no real access to the Domain Controller server, your only option is Meraki hosted accounts. The docs haven't changed this "warning" the last 4 years since my first touch with Systems Manager. Maybe you can contact support to be sure if it's finally supported. I personally never tested it.   But if you want to test it, I think you'll currently need a supervised device which is coming from Apple Business Manager     ... View more

Enrollment redirect URL is just for a custom designed log in page upon Authentication.     The Meraki docs still state, that Azure AD through DEP isn't supported, maybe someone from support can confirm. https://documentation.meraki.com/SM/Device_Enrollment/SM_Enrollment_Authentication     However, if you are using User Enrollment there is currently a known issue I reported a few days ago https://community.meraki.com/t5/Mobile-Device-Management/iOS-16-iPad-OS-16-already-known-issues/m-p/160150#M9593     I'm referring to "known issue" since it has already been discovered by Microsoft in terms of updating a "user enrolled" device https://techcommunity.microsoft.com/t5/intune-customer-success/ios-ipados-15-devices-enrolled-with-user-enrollment-are-unable/ba-p/3621141 ... View more

There was an announcement 🙂   https://community.meraki.com/t5/Feature-Announcements/Systems-Manager-iOS-16-and-Android-13-support-with-new-features/ba-p/159393   I found an article from Microsoft Intune where a similar error is reported. It seems Apple didn't patched it in the final release. Microsoft talks about an issue with updating "user enrolled" devices, but it seems also to affect new enrollments. ... View more

You need to register your organization with Apple on business.apple.com and ideally ask your supplier if they support Apple Automated Device Enrollment (formerly DEP) If not, there are also ways to get devices manually into Apple Business Manager, but I would recommend you to read the docs from Apple   The pro of Apple Business Manager is, your devices are supervised and you can read the bypass code for Apple ID locked phones ipads ... View more

What's your usecase? With Apple Automated Device Enrollment you can always kill users Apple ID after they return the device to you ... View more

Thanks for your reply.   The devices are supervised, so a force update should work without user interaction. There's also no passcode on the phones. Some other vendors are able to force the update.   You mentioned "over cellular enabled" is there a way to toggle this through MDM? I already deployed a profile which allows Settings App to use cellular. ... View more

@PaulF is there a way to see open wishes, so we can vote on them and maybe push one or another up? ... View more

Actually, I now need this to work on Web-Clips aswell.   Any progress @VictorM? ... View more

Google is finally supporting Samsung devices through Android Zero Touch. In this case go away from Knox Mobile Enrollment and set up with Android Zero Touch.   https://documentation.meraki.com/SM/Device_Enrollment/Android_Zero-Touch_Enrollment   I don't think Meraki will put any more effort in this, because you can set up the whole Android Enrollment through Android Zero Touch regardless the manufacturer   I tried different ways with KME and SM, but I keep stucking on the Enrollment Code. It wants me every time to put it in manually.   Best regards ... View more

@JayJun Follow this thread   B2B custom Apps - Business Manager  ... View more

Contact support and they shall unlock the B2B Apps feature like in my second image ... View more

@MCrowther could you add some more in depth to this? ... View more

I think I have a bit other problem with this setting.   A few weeks age I've activated the delay software update for 90 days, because of Xamarin Bug with iOS 14.2 & 14.3 And now the bug has been resolved with iOS 14.4 and I disabled the "delay software update" but the users still aren't able to update. Even when I push (force update) it seems like it doesn't work. This is affecting iPhones on my side.   As side note, some of my iPhones show on device details, they need to update to iPadOS 14.4 😄 ... View more

You can't delete privately installed Apps. You can blacklist them only, so the user won't be able to open them.   Another possibility, disallow App installation at all. ... View more

Last reply from support.   „Yes the screen being locked could interfere with the profile deployment. Also if a user was not logged into the device there would be no user channel to deploy the profile to.“   We deployed the profile on two devices with success ... View more

Try the following   navigate to the Apps dashboard open the App and under License usage details click on „Revoke unknown device licenses“ ... View more

@grldP-NS do you see this option already in the custom profile interface? Could you try deploying the profile on a test device.   Following configs worked for me   Deploy the profile by using user tags for the scope. Owner (in SM) and logged in user should be the same. The user should be actively logged in on the device.   The point that still fails -> Variables are not recognized properly   ... View more

@Kevin_C I think there are two point of views regarding these changes   First and in my opinion the most important. Because of the recent change, no one is able to delete activation lock from DEP devices (Systems Manager - DEP) if they've been deleted from the device list (Systems Manager - Devices)   Second is the problem with user assignment. As already mentioned, I really would recommend to all who use the DEP interface for assigning users and tags to turn MDM authentication ON and let Systems Manager do the work on enrollment.   I'm also interested, why so many still aren't using MDM authentication. I'm open for a discussion PM me on this 🙂 ... View more

As far as I know, Google is planning with Android 11 to provide an standardized API for manufacturers, so EMMs can use this command to push Updates on all Android devices.   Samsung for example is currently solving this on their own way with E-FOTA (which needs seperate licenses)   With SM you could try to force the user to update by providing compliance policies. And if a device isn't compliant, you can delete profiles until it's compliant again. ... View more