@Jacko Admittedly it does make me laugh that Meraki do not default give SM App licenses via Apple VPP by default. Apps in Meraki either come from the iStore or an Enterprise (.ipa) App. The downside to an enterprise App is that it expires yearly, so Meraki are forced to use the iStore. And the only way to get around requiring an Apple ID per device is via Apple VPP. So yes its manual, but only manual on the initial setup. --- Enrol device in to DEP via AC -> Move to correct Server -> Assign DEP Profile -> Turn device -> Skip setup questions > Device received all the Apps/settings and now has full restrictions and control by YOU. Previously: Turn on Device -> Sign in to Apple ID -> Download SM App -> Install each individual App -> Set all required settings -> Device has no restrictions applied unless you manually set them up. The added benefit with DEP vs the SM App are iOS updates control and you can push silent App updates to the devices without requiring the end-user to accept them. (Pre-iOS 11.2 you need to change the focus out of the App on the front and then Apply. From 11.2 you just push the update). The additional benefit over the SM App is the 'Lost Mode', if you ever need to locate a device trigger this. It will then enable the location service on the device, overriding any previous settings. Then disable it once its found, and the location service will disable again (if it was this way previously). I could give a whole lecture on why DEP enrolled devices are better, but the main benefit really does come in around 100+ devices. I wonder how you managed App / iOS updates previously, or did you?! 🙂
... View more