Hey @ACooper-MP    Resaving my floor plan and confirming all the devices were assigned to the floor plan appears to have resolved this one for me, you do sound like you're experiencing a different issue so Support will be best suited to help here.   Cheers,   Connor ... View more

Hey @ACooper-MP,    Is your Network-Wide > Clients > *Client Name* map just defaulting to show the world map? Been having a peek at this after reading your post and have noticed the location data for my network has disappeared.   If so, would you mind opening a support ticket so we can take a closer look?   Cheers,   Connor   ... View more

Hmm that's a new one, assigning a DEP profile will only actually take affect when the device is factory reset. If you haven't already, I'd recommend opening a support ticket for this one, so they can take a closer look.   Cheers,   Connor ... View more

From past experience, with Android Go it'll either fail to even provision (which sounds like what you're hitting) or it'll fail during the work profile creation.   If you're able to obtain Android Logs from the device during attempting enrollment, send it over to support@meraki.com and let me know the case number - this should be able to give us some more info as to why it's not working. ... View more

Alcatel 1 2021 runs Android Go - which does not fully support MDM commands/configuration https://www.ncsc.gov.uk/blog-post/ready-set-android-go ... View more

Some general questions to start:   What method of enrollment are you doing, BYOD or Device Owner? Have you got enough SM licenses? What's the device make and model, does it have Google Play Services installed (newer Huawei devices don't for example)? ... View more

Likely carrier-grade NAT if you're not using a SIM/APN with a public IP.  https://en.wikipedia.org/wiki/Carrier-grade_NAT   I'd perform packet captures on both MXs to see which end is only getting unidirectional traffic, then speak to your carrier to get a proper public IP address assigned to your SIM.  ... View more

Sounds like it's working as expected to me, if you're full tunnelling to Surfshark VPN, you'll be able to bypass any restrictions set on your upstream MX. This is due to all your traffic being encrypted between the client and Surfshark which the MX cannot inspect.   Re: IPv6, as per Surfshark's own KB, they don't support. ... View more

Happy to help! The "Allow modifying account settings" is a very powerful one, as explained by Apple: "Users can’t create new accounts or change their username, password, or other settings associated with their account." https://support.apple.com/en-gb/guide/mdm/mdm54960f92a/web ... View more

Quick update, this has been reported to Engineering. As soon as I get any updates I'll bump this thread. ... View more

Can you open a case with Meraki Support regarding this, please? I'm seeing a few instances of this. ... View more

This is brilliant, thank you @PaulF for sharing! ... View more

It is on our documentation:    When using SAML with Dashboard, the user must first authenticate with the IdP. This is referred to as IdP-initiated SAML. After the user has successfully authenticated and been directed to Dashboard, they will be granted access if they have a valid role and the IdP is correctly configured.    Note: Only IdP-initiated SAML is supported at this time.   https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Configuring_SAML_Single_Sign-on_for_Dashboard   For Google's documentation, I recommend submitting feedback. This can be done by hovering over any of the text on the page, and clicking the Feedback button to the right:     ... View more

You'll likely be behind carrier NAT too. Which means you don't have a public IP address on the cellular interface and instead are being NAT'd by your cellular provider. ... View more

Looking at the Apple docs, there's no specific restriction that prevents App Store access on Messages: https://support.apple.com/en-gb/guide/mdm/mdm0f7dd3d8/web I'd suggest this is likely a feature request /issue that Apple will need to resolve, you can open a support ticket directly with Apple if you wish: https://support.apple.com/en-gb/contact ... View more

Nice one 👍🏽 anytime! ... View more

As a friendly FYI: * MDM communications will stop working after the APNS (Apple Push Cert) expires * However, you can renew this cert even AFTER it has expired and then MDM communications will work again * Always renew the cert, do not generate a new one else you will need to re-enrol all devices again ... View more

I can recreate this on my supervised iPad, however, you'll notice that all app "Get" or "Download" buttons are disabled. So whilst the user can still browse the App Store via this method, they cannot actually install anything.     ... View more