Meraki

Fredel · ‎Feb 9 2023

Has anyone still don't find any way around this Zero Touch deployment for Macs?

florian2 · ‎Jun 24 2022

@sshort can you elaborate how to export and import a profile with these more advanced settings into Meraki MDM? Many thanks in advance!

puananiila99 · ‎May 3 2022

I have over 100 duplicate teams at SCCM. Why does that happen? Some network problem?

zunamiwave · ‎Apr 14 2022

I am also looking for an update on this. DWV did you get this working?

Jame · ‎Jun 2 2020

Yes, the new agent solved this for me as well. In addition to a profile for m_agent I made with PPPC Utility.

T1 · ‎May 28 2020

If anyone is still interested, this is how I did it. In Okta create a new app, type Web. In General Tab set the following: Initiate login URI: https://m.meraki.com Login redirect URIs: merakismoauth://com.meraki.pcc https://m.meraki.com https://mp.meraki.com/ssp/login https://mp.meraki.com/ssp/loginsuccess https://portal.meraki.com/loginsuccess Allowed grant types: Authorization code tick Implicit (Hybrid) tick Allow ID Token with implicit grant type tick Allow Access Token with implicit grant type In MDM go to System Manager > General and scroll down to User authentication settings. Choose OpenID Connect from the drop down menu. Authorization endpoint: https://TENANT.okta.com/oauth2/v1/authorize Token endpoint: https://TENANT.okta.com/oauth2/v1/token Client ID: XXXXXXXXXXXXXX (Okta app Client ID) Token issuer claim: https://TENANT.okta.com Public Keys Endpoint: https://TENANT.okta.com/oauth2/v1/keys?client_id=XXXXXXXXXXXXXXX Public Keys Format: JWK Endpoints can be looked up via this API call: https://TENANT.okta.com/.well-known/openid-configuration?client_id=XXXXXXXXXX I suppose this approach can be used with any IDP and then you need to double check what claims IDP returns to Meraki. Meraki expects "email" claim with user email as a value. Okta sends all default info in its claim so there is no need to set up a custom authorization server. With other IDPs it can be different. I asked support to include this example to official docs.

David-B · ‎Apr 29 2020

I wasn't able to get ProfileCreator to work as it wouldn't load a Google font file. This appears to be a known bug for ProfileCreator (https://github.com/ProfileCreator/ProfileCreator/issues/189) And ProfileCreator isn't being actively updated. I was able to follow the steps outlines in this Meraki documentation (https://documentation.meraki.com/SM/Profiles_and_Settings/Using_Custom_Apple_Profiles_with_Systems_Manager) to create a profile, upload, and deploy the fonts I needed to Macs. Basically use Apple Configurator 2 from the App store to create a profile to upload to Systems Manager.

PEN-969 · ‎Nov 20 2019

Hi, did you ever get a fix from Meraki on this? I am having the exact same problem trying to deploy a Winclone file turned into a .pkg by Winclone 7. I have tried deploying the .pkg & putting it inside a .dmg for Meraki and both fail during unpacking. Uploading to the Meraki cloud completes the Upload Checksum but never moves the upload bar past 0%.

Noah_Salzman · ‎Sep 12 2019

Sorry about the sneaky delivery of that feature. We are currently working with the Documentation team on a better system for announcing and documenting minor features/improvements. Noah Salzman Product Manager for Meraki SM

sshort · ‎Aug 12 2019

@CherylA The latest iOS 12.4 allows for up to 200 MB over cellular, and iOS 13 will remove that restriction entirely. https://www.cultofmac.com/629094/ios-13-drops-app-store-200mb-download-limit/

sshort · ‎Jun 25 2019

It's not in Apple's documentation yet, but at the WWDC "managing devices" session they did have a slide indicating that a profile would be available to restrict or block the activation lock feature. It's up in the air as to when Meraki would support the new profile payload, however. I would keep an eye on ProfileCreator, so when the app is updated with new Catalina payloads you'll at least be able to create a custom profile you can then upload to Meraki.

PeterJames · ‎May 17 2019

We have been using the new system for an number of months now. I had posted when we first went over: https://community.meraki.com/t5/Dashboard-Administration/Apple-Business-Manager-ABM-My-thoughts-VPP-Meraki-Documentation/m-p/29823#M1092 Only thing to note is the VPP. Meraki have also updated the documentation for this: https://documentation.meraki.com/SM/Apps_and_Software/Apple_Volume_Purchase_Program_(VPP) The only thing to remember is that the APNS Certificates are still part of a different system! Now time to get all our customers across...

jm_peterson · ‎May 10 2019

@MelissaI would love to be apart of this as well. I tried to send you a PM but it appears that option is absent on your profile.

sshort · ‎May 9 2019

@SoCalRacer On Macs/iOS the profile only restricts Siri (and Cortana is only restricted on Windows 10 devices). Blocking Google Assistant from Chrome is supported in Windows and ChromeOS, but not macOS/iOS, and I'm not aware of Alexa support on the Mac.

beks88 · ‎Apr 5 2019

I tried the DND with Apple TVs. When pushing OS updates through Devices dashboard, you can see a scheduled OS update message when viewing the device logs. When entering the client and clicking on Install OS update, the device installs the update, doesn't matter if there is a DND policy. Will take some time to test it in detail on iOS devices.

BlakeRichardson · ‎Mar 19 2019

I would steer clear of profile manager, the software is not designed to be used for deployment its only deisgned for testing purposes. Most MDM's don't allow control of application settings. You could potentially install user default Safari preferences using an install package.

Richard_W · ‎Mar 14 2019

I'm just baffled as to why deleting a machine from network in device list does NOT do that. I would have expected that that action along with an erase and install would render the machine as a new client. If Meraki can send an email stating that DEP setting have changed for a particular serial number then surely it should be able to purge this info from SM so that re-enrollment should be as advertised. As per article ID: 1267 Removing Settings from Devices In the event a device needs to be reset and managed under different conditions, the settings applied via DEP can be removed. Navigate to Systems Manager > Manage > DEP. Click the checkbox next to the device(s) in question. Click Remove settings. and voila nothing...

beks88 · ‎Mar 14 2019

We are deploying Macs through DEP since August 18' and everything works fine, agent and profile are being installed OTA, you just need to add the agent to your Apps enrollment as described on the page posted by @PaulK

eatyourpeas747 · ‎Mar 14 2019

curious if other MDM's are doing this or not

StevenW · ‎Mar 5 2019

awesome.. thanks for the help

GrldP · ‎Feb 26 2019

Thanks a ton for that! Actually, I explored Profile Manager (which I was extensively trained to) but could not immediately figure out how I could set the accounts variables based on the assigned user for the device in Meraki. But I need to explore more before asking for help to the community. Oh, and also thank you for the Profile Creator app, looks like an amazing tool!

sshort · ‎Feb 6 2019

@swillette702 A clever workaround a colleague shared is to set a password for Screen Time, and then set specific apps to be disallowed for 23 hours and 59 minutes. It's not perfect, but it does mean that for the majority of a 24-hour period a user will get a passcode prompt to use an app when it's opened.

GavinMcMenemy · ‎Jan 29 2019

This was actually my 1st thought but we don't have that in place... I am still puzzled.

sshort · ‎Jan 7 2019

This site tries to keep a database of any known managed app config settings on iOS. That being said... Apple doesn't allow for any management of "default" apps for mail/calendar/contacts/Maps/browser/etc.

MumenRider · ‎Dec 19 2018

Hey thanks for that info! I'm going to try this with an impacted station to see if it prevents a recurrence, but I'm hoping to find a preventative measure, since I'm seeing this on freshly-installed Mojave instances which (presumably) have a fresh & clean configuration profile database. Unfortunately this is one of those issues that falls in the crevasse between Apple and Meraki. Meraki support is blaming OS X, and Apple wants nothing to do with this issue and advises me to "work with the software vendor." Maybe the next time the jamf rep calls I'll pick up the phone... 🙂

About sshort

sshort

Community Record

Badges