Thanks for the input. yeah i’d already discounted using a single iCloud account for all the reasons you mentioned above. Tried it once back in the day....not a good result.   ... View more

Hi, yeah i got it working with VPP assignment per device. I then tested it with assignment per user, but i don't really need that. I have to compromise and manually sign in to the phone with a newly created staff AppleID, but let everything push out via device assignment. The AppleID signin is purely for backing up sms, photos etc and not least Find My Phone ;) Any apps that a user requires, if its business related then i assume others would find it useful too so i push it out from SM. Personal apps don't get a look-in as its a business device and i've had enough of solving issues caused by idiots being allowed to install what they want onto their company phone.   ... View more

Thanks for your continued help on this OCT_OMG. The ideal would be that i could create AppleID's en masse in ABM. They flow through into SM and when assigning a user to the device in SM that it also signs in the AppleID associated with the user. Otherwise if you had a new iphone shipped straight to the employee, they'd still need to signin with the AppleID you give them. But i dont think it can be done. When you create a VPP user in SM, it emails the person, so you need to either pre-warn them to forward on those kind of emails or have the users login details to do it all for them. Once done you can then create an owner by importing the VPP list. It's very convoluted.......and sadly its been this way for a few years now.   I've successfully enrolled an iphone7 using VPP device assigment and its actually very fast to install all the apps. But, again, the issue of backing up things like sms, contacts, photos etc is forefront of my deployment dilemmas.     Another thing, i've now upgrade to ABM from DEP. I've use our main domain, but i have another domain that is basically a separate company within the group of companies i look after. Not fig ... View more

The other benefit of having iCloud sign in is tracking. SM is laughably bad at showing the location of a device. I mean, ssoooooooo bad they should probably remove it. I have almost zero faith in SM’s ability to geo locate, I had to abandon the geo policies I set up as they constantly got it wrong and it’s embarassing to ring an employee and ask why they are literally 100s of miles away (according to SM) and then they walk into your office, phone in hand with a quizzical look on their face. ooops! ... View more

Thanks. i did read that upgrading DEP to ABM only allows management of AppleIDs for actual users of ABM not general employees, which if true is a damn shame ☹️ ... View more

sadly only onedrive personal will auto backup your camera roll (which is very handy). We have Onedrive for business, which is 1TB but won't back up photos. icloud does it........but guess what? Back to my problem of backing up a device without being signed into an icloud account.   Oh, the frustration of it all, lol. ... View more

Excellent, thanks Philip, appreciate the link :) ... View more

I already have over 100+ users on VPP, but i've found its a ball-ache, enrolling each new user in VPP, waiting for the email, verifiying it, then reviewing it in itunes before it actually associates itself with VPP. Only then can i start to tag apps for deployment. This has always gone on using AppleID's though AND unsupervised. I have the envious task (potentially) of ensuring every one of those devices is supervised, meaning 'preparing' them in AC, so they can go into DEP, enrolling them, assigning them in SM and then wiping them. Of course the issue there is they'll lose all their data as from what i've read, restoring from icloud wipes out the supervision. So.....back to square one.   So, the 'no need for apple id' scenario would be ideal, but the devices need backing up. WE have designers and all sorts taking 1000s of pics using their ios devices. ... View more

photos, notes, text messages, maybe contacts, if the user doesn't know how to ensure the contacts are saved to the outlook app that will be deployed (we use office 365). ... View more

Thanks, i'll make the config alts now.   What about backing up of devices though? Without a signed in icloud account the device won't get backed up and that could be an issue due to photos, notes, contacts etc. We use Office365 and SM pushes the outlook app to devices. Would it be possible to use the same managed icloud account for each device, just so they back themselves up i wonder? ... View more

Thanks, i do have that set so that users cannot install apps. I've also arranged the home screen  (in the profile) so that certain apps appear in the same place on each iphone, however this locks down the page so that the user cannot move ANY apps, and that's unnecessarily restrictive in my view as some use certain apps more than others so would want a different priority on the homepage . I wouldn't have thought that by simply assigning 'some' apps to the homepage that it would lock everything down, but it does.    I've created a new topic about not using AppleID's but not had any replies. Not having to create employee AppleID's would be heaven, but then how would their phones get backed up without a logged into icloud account? ... View more

Further to this, if we truly don't need AppleID's, is there a part of the SM policy where i can disallow an iphone user from actually signing into their appleID so that they cannot install their own apps? ... View more

I have VPP all setup and have loads of purchased apps in VPP. So if i acquired all our free apps through VPP also, it would allow me to silently configure an iphone fully without the needs for creating employee AppleIDs? ... View more

Lol, they directed me to a KB article and the community. ... View more

Bumping this as the community seems to respond quicker than the offical meraki support. Could really do with some guidance on this please folks. ... View more

But surely it shouldn't disallow the user from moving any of the icons around, especially any icons that ARE NOT specifically 'mentioned' in the home screen settings? If so, then by simply adding a single app icon to the home screen it fudges anyone from moving anything. that can't be right. ... View more

Ok, there are plenty of things that are bugging me but its only cos i can't get my head around some of it.   So, had issues prepping an iphoneSE into DEP. Eventually got it there, assigned it to Meraki and it appears in SM. Applied my core settings and also my 'supervised-iphone' profile. It puts relevant apps on the front screen on the task try (if that's what you call it on ios)? However, it doesn't allow the user to move/edit the home screens at all. I can't find which setting this is in the profile. So, that would be a big step forward if i can nail that bit.   Thanks     ... View more