It sounds like you've done most things right, but the issue might be with how Meraki SM handles the profile. Device management tools like Meraki can sometimes have restrictions or bugs when pushing specific payloads like Exchange accounts, especially with variables. You could try breaking the payload into separate profiles – one for each account – and see if that resolves it. Also, ensure the Meraki SM version you're using fully supports macOS 10.14.5, as compatibility could be an issue. If you're still stuck, it might be worth looking into manually installing the profiles as you've done or checking if there's a known bug with Meraki and Exchange setups. Also, if you're looking for Microsoft Office subscriptions for future setups, there's a great deal on Office Home & Business 2021 for Mac. ... View more

At this time it is only supported for iOS/iPadOS. Furthermore, it is briefly mentioned as a method in the following KB for specifically iOS/iPadOS: https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Managed_Devices#iOS.2FiPadOS   As Dave mentioned this will only remove the management profile. To unenroll ADE devices please refer to this section: https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Managed_Devices#ADE_enrolled_devices_(Apple_business_manager_.2F_Apple_school_manager) ... View more

Hi   I've highlighted this to the engineering team, and that splitting the ability to manage OS updates from Kiosk Mode would help.   Paul ... View more

There is an issue with iOS 16 enrollments that Engineering is working on. They have a case open with Apple as it *may* be a bug on Apple's side. ... View more

Looks like I'm not getting the prompt to update the cert after using the command. I've tried it on two different machines that has push cert in a non-compliant state.  ... View more

There was an announcement 🙂   https://community.meraki.com/t5/Feature-Announcements/Systems-Manager-iOS-16-and-Android-13-support-with-new-features/ba-p/159393   I found an article from Microsoft Intune where a similar error is reported. It seems Apple didn't patched it in the final release. Microsoft talks about an issue with updating "user enrolled" devices, but it seems also to affect new enrollments. ... View more

Hi Beks88  We do have it registered with Apple Business ... We have all of the devices DEP or ADE enrolled. and they are supervised. I will read more about this as well. Thank you for your response.    ... View more

Is there a solution for this ongoing issue? ... View more

Thanks for your reply.   The devices are supervised, so a force update should work without user interaction. There's also no passcode on the phones. Some other vendors are able to force the update.   You mentioned "over cellular enabled" is there a way to toggle this through MDM? I already deployed a profile which allows Settings App to use cellular. ... View more

@PaulF is there a way to see open wishes, so we can vote on them and maybe push one or another up? ... View more

Actually, I now need this to work on Web-Clips aswell.   Any progress @VictorM? ... View more

Have you had any luck finding a solution? My company is looking for the same thing. ... View more

Oh it's a good news.   I tried to test the post that the problem was fixed. Even if 'Delay OS Software Updates' is not set, my iPad is always set to iOS updates to a 1 day delay I have been disabled again after enabled this setting today. The problem was solved as dfurasek said.   This can be checked directly in the Profile's Restriction pane in the iPad.   @dfurasekIf 14.5 update is released this month, you will be able to update immediately! Thank you.   ... View more

@m_lingenfelter and @rossbryant    Here is what I created for a profile in Apple Configurator 2.   AC2 Global HTTP Proxy   This is the string I use but sanitized.  https://www.securly.com/smart.pac?fid=xxxxx@eaglepnt.k12.or.us&user=$OWNERUSERNAME@stu.eaglepnt.k12.or.us   I then upload the created profile into Meraki and have it push out to student devices.   Securly Profile When Meraki pushes it onto the device is when the variable is sorted out and injected into the string that ends up on the iPad.  iPad Proxy Setting   Please if you have any questions feel free to reach out to me. ... View more

We're fairly new to the platform, but yes this is incredibly annoying.    Everyone I have moved to Meraki MDM has a "profile missing" but all the profiles I have assigned are in place. ... View more

Google is finally supporting Samsung devices through Android Zero Touch. In this case go away from Knox Mobile Enrollment and set up with Android Zero Touch.   https://documentation.meraki.com/SM/Device_Enrollment/Android_Zero-Touch_Enrollment   I don't think Meraki will put any more effort in this, because you can set up the whole Android Enrollment through Android Zero Touch regardless the manufacturer   I tried different ways with KME and SM, but I keep stucking on the Enrollment Code. It wants me every time to put it in manually.   Best regards ... View more

@beks88  thanks for sharing, very useful to know this.  ... View more

We create a custom tag e.g. CUSTOM Then we create two profiles - one is Kiosk (single app) mode. With Safari as single app. Only the following are ticked. The tag is added to the profile's configuration page as a device tag. Then we create another profile, same device tag, with a managed app config for safari that contains: KEY: webpage title TYPE: Text VALUE: Webpage address   In that same profile we add Web Content Filter, with whitelist bookmarks. The bookmarks are the same address as the address in VALUE above. The name of it is the same as KEY above.   When we're done we save those profiles, apply the device tag to the device which adds both those profiles, and then we've got Safari locked down to just those webpages. As it's whitelist, only those webpages listed in the whitelist are allowed to be opened. All others are blocked. ... View more

@beks88  At this stage it looks as though it not supported as SM only shows sync options for ASM not ABM. I would say Meraki are working on this.     @lpopejoy  No it requires either ABM or ASM both are free to join. ABM simply requires a DUNS number ot join and ASM you have to prove that you are a school.  ... View more

Hello,   I am wondering about "Revoke unknown device licenses"    I want to remove all devices from Meraki at the end of the year. Then run the above.   Will this give a 'grace period' - or will they remove straight away.   How do I invoke the grace period for managed VPP apps   According to step 4, on page 4 here - there is a difference:   https://www.apple.com/au/education/docs/VPP_Education_Guide_EN_Oct13.pdf ... View more

My issue was resolved with the help of the support organization.  There were 2 records in the SM dashboard for the same UUID (i.e. device) although I could not see that by filtering on the device name.  I had to query the device in question, copy it's UUID, filter the Devices page by the UUID and delete the incomplete device entry.   Now if I could just get remote Screen Sharing (Remote Desktop) to work without prompting the user in Catalina... ... View more

We don't enroll Macs via DEP but with iPads profiles for iOS 12 and iOS 13 are not completely interchangeable. We had a case when iOS 12 device wouldn't activate with iOS 13 profile or other way around. We do skip as much steps as possible though, so I think the reason might lie in additional steps introduced in iOS 13. iOS 13 profile works fine with iOS 14 device though. ... View more

Hi @Noah_Salzman    Regarding your post from ‎09-03-2020:   "Hi dfurasek, I'll look into this and get back to you."   ...is there any news on the activation lock removal piece for non-enrolled DEP devices in the legacy MDM?  Thanks again. ... View more

Hey MinhPhan, Sorry to hear you have a similar problem. I too had over 200 available licenses with a brand new VPP token. I never came up with a solution. Strangely, yesterday, after not touching them for a month, I looked at my two problem iPhones and they magically solved their own problem. Everything was installed correctly. Hmm. I got curious and decided to remove them from Meraki, then removed them from the MDM server in DEP (and left them unassigned), and reset them. Then re-assign the MDM profile in DEP. It replicated into Meraki and the phones re-acquired the profile correctly. It worked again. Yikes. Whatever license problems they had, resolved themselves, as I left them alone for over a month. Or Meraki silently/mysteriously fixed something. Sorry I don't have a solution for you. Best of luck. ... View more

You can't delete privately installed Apps. You can blacklist them only, so the user won't be able to open them.   Another possibility, disallow App installation at all. ... View more