As @Melissa showed, setting the Meraki MDM app to auto-install will re-install it silently of the user deleted it. ... View more

I will definitely take a look!   In regards to the WiFi profile, I agree - I usually push profiles separately to devices and don't combine them into a "mega" like profile. This always makes it easier to exclude a device from the scope. The only way (easily) I could think of fixing that problem where the WiFi profile comes after is to push them as a pair inside one profile. The other option would be to use a policy that sees if the Systems Manager app is installed and then trigger it to install when the device is compliant with that (the systems manager app always deploys after the profiles).     ... View more

@DBHS When doing the setup make sure the check mark to "activate" the device is not checked. Then go into deploy.apple.com (DEP) and assign it to your Meraki server (serial # usually works best) > set prestage enrollment in Meraki (make sure this is done before setup on the device is started.   Jared ... View more

Thanks for this suggestion, and you'll be pleased to know there is a feature request in the system already for this ability.  It is a good/valid request and you can expect it to come in time, but ETA is unknown.  The best suggestion is to keep making the wishes (best to make the wish while you're actually on the packet capture page in Dashboard so it gets properly categorized) and keep the feedback coming through your Meraki or Meraki Partner sales teams so they can also help prioritize.   ... View more

@MRCUR wrote: This is a known issue with Sentry policies. I've had a case open on this since June 2016 with no resolution to date.  Thanks, at least now i know i wasnt doing it wrong. ... View more

@soomeGUy I have actually done this successfully before by creating a policy that looks for a device in required kiosk mode (locked in) to Safari and then have a configuration profile scoped with content filter whitelisted that is triggered when the security policy is true (yes - the device is locked into safari). Would probably work for your needs. ... View more

I whitelisted *.apple.com and it fixed my issue, thank you! ... View more

@soomeGUy yes, we are expecting the MS120 to be quite a bit cheaper than the MS225 because they don't have 10Gb/s connectivity. ... View more

I've never done it, but I don't see any issue with that. You could also use tags for this purpose (creating a tag per division) and assign those tags to the devices. ... View more

I've only ever done it using Windows machines, which allows you to do it via group policy.   If you are using PEAP/MSCHAPv2 and you use a public certificate on your RADIUS server (that matches its domain) then you don't need to deploy any certificates to devices, ... View more

i added the devices to DEP using the new ios11 feature via apple configurator.  i then reset the device and deployed it with the DEP.  However I still see remove management, is this due to the 30 day grace period I think there is when adding a device to DEP via apple configutator?     ... View more