Thanks for the input. yeah i’d already discounted using a single iCloud account for all the reasons you mentioned above. Tried it once back in the day....not a good result.   ... View more

Thanks for your continued help on this OCT_OMG. The ideal would be that i could create AppleID's en masse in ABM. They flow through into SM and when assigning a user to the device in SM that it also signs in the AppleID associated with the user. Otherwise if you had a new iphone shipped straight to the employee, they'd still need to signin with the AppleID you give them. But i dont think it can be done. When you create a VPP user in SM, it emails the person, so you need to either pre-warn them to forward on those kind of emails or have the users login details to do it all for them. Once done you can then create an owner by importing the VPP list. It's very convoluted.......and sadly its been this way for a few years now.   I've successfully enrolled an iphone7 using VPP device assigment and its actually very fast to install all the apps. But, again, the issue of backing up things like sms, contacts, photos etc is forefront of my deployment dilemmas.     Another thing, i've now upgrade to ABM from DEP. I've use our main domain, but i have another domain that is basically a separate company within the group of companies i look after. Not fig ... View more

The other benefit of having iCloud sign in is tracking. SM is laughably bad at showing the location of a device. I mean, ssoooooooo bad they should probably remove it. I have almost zero faith in SM’s ability to geo locate, I had to abandon the geo policies I set up as they constantly got it wrong and it’s embarassing to ring an employee and ask why they are literally 100s of miles away (according to SM) and then they walk into your office, phone in hand with a quizzical look on their face. ooops! ... View more

Thanks. i did read that upgrading DEP to ABM only allows management of AppleIDs for actual users of ABM not general employees, which if true is a damn shame ☹️ ... View more

Thanks, i'll make the config alts now.   What about backing up of devices though? Without a signed in icloud account the device won't get backed up and that could be an issue due to photos, notes, contacts etc. We use Office365 and SM pushes the outlook app to devices. Would it be possible to use the same managed icloud account for each device, just so they back themselves up i wonder? ... View more

Thanks, i do have that set so that users cannot install apps. I've also arranged the home screen  (in the profile) so that certain apps appear in the same place on each iphone, however this locks down the page so that the user cannot move ANY apps, and that's unnecessarily restrictive in my view as some use certain apps more than others so would want a different priority on the homepage . I wouldn't have thought that by simply assigning 'some' apps to the homepage that it would lock everything down, but it does.    I've created a new topic about not using AppleID's but not had any replies. Not having to create employee AppleID's would be heaven, but then how would their phones get backed up without a logged into icloud account? ... View more

Further to this, if we truly don't need AppleID's, is there a part of the SM policy where i can disallow an iphone user from actually signing into their appleID so that they cannot install their own apps? ... View more

I have VPP all setup and have loads of purchased apps in VPP. So if i acquired all our free apps through VPP also, it would allow me to silently configure an iphone fully without the needs for creating employee AppleIDs? ... View more

OMG.....they've come back a day later. How the hell can this happen? Looks like i'll have to contact support and wait the usual lengthy amount of time for a response. Not what you expect form a paid for service, but hey ho. 😞   ... View more

Actually Melissa is right. However first time i tried it, it wouldn't show any other profiles so i assumed it wasn't cross-network aware. But having tried it again it did indeed show ALL profiles from ALL networks. I chose the copy from other profile option and saved the page, however it sat at the "saving" stage for well over an hour. I refreshed the page and the profile was there all ready for me. So, case closed, many thanks for your contributions guys. ... View more

Thanks for the replies, but if i've removed the agent/application from the windows device then how on earth can it possibly be connecting back into the SM? I just don't get it? I'm losing about 15 Enterprises licences to this issue at approx £25 per licence = not fun   We use a domain firewall, and blocking that port would just cause issues i'm afraid.     ... View more

This is a huge kick in the conkers for someone like me who has to retrospectively supervise almost 200 devices. This is only retrospective because Apple used to make it so damned hard to enroll into DEP. Since they've now made it much easier, i now have a DEP account i now need to get all our devices into DEP then supervise them. You all the rest of the nightmare i'm about to have, as some of you have been through it / standing on the precipice. 😞   ... View more

Lol, they directed me to a KB article and the community. ... View more

Bumping this as the community seems to respond quicker than the offical meraki support. Could really do with some guidance on this please folks. ... View more

But surely it shouldn't disallow the user from moving any of the icons around, especially any icons that ARE NOT specifically 'mentioned' in the home screen settings? If so, then by simply adding a single app icon to the home screen it fudges anyone from moving anything. that can't be right. ... View more

Ok, there are plenty of things that are bugging me but its only cos i can't get my head around some of it.   So, had issues prepping an iphoneSE into DEP. Eventually got it there, assigned it to Meraki and it appears in SM. Applied my core settings and also my 'supervised-iphone' profile. It puts relevant apps on the front screen on the task try (if that's what you call it on ios)? However, it doesn't allow the user to move/edit the home screens at all. I can't find which setting this is in the profile. So, that would be a big step forward if i can nail that bit.   Thanks     ... View more

Ok, so for this it turns out i had another profile that was deploying to ALL devices. Since removing that things are looking better, but there are still things it's either not doing that i expect or i'm simply a goof at all this..... 😞   ... View more

Why thank you sir. That option was indeed unchecked. However, i've checked it, saved the profile, refreshed the profile, and even rebooted the ipad from its device page in SM, but account settings are still greyed out. I thought profiles and their subsequent amends are updated 'live' so to speak. I sent a message so that it forced a connection sync with the ipad. Not sure what else to do short of wiping it again, but surely that defeats the object of have profiles applied post-supervision wipe. ... View more

*double post* ... View more

Thing is, i cant find ANY settings at all, across the board that actually disable access to icloud. ... View more

Ok,so. Devices were in DEP and i assigned the core policy to them. used apple configurator to 'restore' one and chose 'erase settings' on the other. I was experimenting 😛 devices wiped, then came up with only the steps i wanted to see appear. They asked for an appleId which i inputted. Both devices have tags that then pushes out a MDM settings profile that amongst other things changes desktop icons etc. which seems to work fine. Think i said most of this in my op, as that's pretty much really all i've done. That said, i'm new to this so please forgive any rookie errors i may have made. ... View more