Hi.   Whilst packaging files and script (and even plists) is relatively trivial on the Mac (you can even do it from the command line with pkgbuild), things aren't as easy for Windows   Because of this, I've put together a guide on how to package scripts, files, .exe and .bat files, and even run one of the files after install, so that you can completely provision your windows devices:   There’s many ways to create an installer for windows that performs functions above and beyond what a ready packaged installer will do. For example, reading and setting registry entries, placing files in various places, running batch files, etc. Whilst there’s plenty of commercial applications to do this, I’ve used a app called NSIS to show what can be achieved   Steps.   Download NSIS from https://nsis.sourceforge.io/Main_Page Install. This show place a shortcut on your desktop Run. This should spawn a window like this:       For the basis of this demo, we are going to put some files into a folder on the current users desktop and execute one of them Create a folder on your desktop (NSIS_Test_Project in this case) and move the files you need into it Create a file called FileInstaller.nsi in here using notepad (or a similar text editor) Drop in the following text   OutFile “AcmeInstaller.exe”   InstallDir $Desktop\AcmeFiles   Section   SetOutPath $INSTDIR   File AcmeIncConfigData.json File catchyCorpJingle.wav File customerInformation.csv File font1.font File readme.txt File runme.bat File runme.exe   SectionEnd   Section nsExec::Exec $DESKTOP\AcmeFiles\runme.bat SectionEnd   Save   Notes: AcmeInstaller.exe : the name of the file you’re going to create with the app $Desktop is a variable which will have the correct path for the currently logged in user, to the Desktop $Desktop\AcmeFiles : A folder on the users Desktop where we will install the files $INSTDIR The above folder, $Desktop\AcmeFiles $DESKTOP\AcmeFiles\runme.bat : The bat file that we will run as part of the installer process. This could be an msi, exe, bat or even cmd. Having a bat file means that you can have complex logic being used   I've used the Desktop as it's a useful place (and easy) to spot that the files are being installed and executed correctly: For production, I'd use somewhere that's available whether the user is logged in or not: /tmp for transitory files, Program Files, or somewhere more convenient for you   You should now have:     Click Compile NSI Scripts in the NSIS app You’ll be asked to load an NSI file     select the one we’ve just created: The screen will run through your script and identify any issue   You can click Test Installer to run through and text everything You’ll now have a new file that you can use with Meraki Systems Manager!   ... View more

Whilst MAC address Randomisation has been with us since Android 10, it was turned on by default when joining networks with iOS 14. This has had an impact on companies that use MAC address auth, or features like Meraki Sentry (which uses Systems Manager).   So, firstly, you can use Systems Manager to manage this with iOS: https://youtu.be/Bj9Gg7h50Gk   But I also wanted to put some background with regards to the OS support for MAC randomisation:   Windows: Can be turned ON for Windows. It’s either included, or not included, depending on the version of windows, and depends on the WiFi network card vendor It can be done by network, or system wide https://support.microsoft.com/en-us/help/4027925/windows-how-and-why-to-use-random-hardware-addresses https://support.microsoft.com/en-us/help/4578384/why-use-random-hardware-addresses Android:   From Android 8.0, Android devices use randomised MAC addresses when probing for new networks while not currently associated with a network. In Android 9, you can enable a developer option (it's disabled by default) to cause the device to use a randomized MAC address when connecting to a Wi-Fi network.   In Android 10, MAC randomization is enabled by default for client mode, SoftAp, and Wi-Fi Direct.   https://source.android.com/devices/tech/connect/wifi-mac-randomization iOS / WatchOS / iPadOS   Apple added MAC address randomization to its devices starting from iOS 8. In iOS 8, randomized addresses are only used while unassociated and in sleep mode. iOS 9 was extended to also use randomization in what Apple calls location and auto-join scans. Use private Wi-Fi addresses in iOS 14, iPadOS 14, and watchOS 7: https://support.apple.com/en-gb/HT211227 macOS:   macOS does not appear, at this time, to use randomisation for MAC addresses   Background: http://papers.mathyvanhoef.com/asiaccs2016.pdf   ... View more

Prompted by a customer request the other day to lock down Chrome on iOS to a range of webpages, I thought it was worth sharing my findings and a solution.   So, the request: To Lock down Chrome so that it could only display a range of webpages, and not allow browsing elsewhere   Many apps support the appconfig.org standards that allow for application config management. Meraki Systems Manager also supports this, so, if the app supports it, when creating a managed app config, such as Nine Work for Enterprise...     Systems Manager will offer a list of supported settings when you can then configure, as above.   So, having created one for Chrome, I found nothing...   I then found the following resources:   https://sites.google.com/a/chromium.org/dev/administrators/ios-mdm-policy-format https://sites.google.com/a/chromium.org/dev/administrators/policy-list-3 https://cloud.google.com/docs/chrome-enterprise/policies/ https://support.google.com/chrome/a/answer/9116814 http://www.chromium.org/administrators/policy-list-3   And discovered that, “Policy Support on Chrome on iOS is being removed in Chrome 48 as part of Chrome's move to WKWebView where supporting many of the policies was not possible.” And “Doesn't support managing browsers on Android or iOS.”   So, that ruled out trying to lock Chrome down...   Knowing that it's not (currently) possible to lock Safari down in Kiosk mode, my thoughts turned to Webclips...   A Web Clip is essentially a shortcut to a website that can act as an Application. You'll be able to click links within the Web Clip, but won't have free browsing, unless the website you add takes you to places like Google, for example!   So, I first created a restriction where I hid every single iOS app:     (Obviously, you can use this Restriction profile to further lock down the iPad, prevent the use of other capabilities, etc)   Secondly, I then created a Web Clip profile:     Note: It's important to tick the "Full Screen" option   I then deployed this down to the device.   Now, I'll admit, it's not perfect, but you end up with:     ("I've included the Meraki SM app as well, for debug purposes). The Web Clip is on the right.   This takes you to:     Perfect!   However, some observations:   You can't get rid of the Settings application, sadly. You could use Home screen Layout and hide it in a folder, however.   Users can navigate to the "Today" view, by swiping right...     And search for things:     But clicking on them doesn't do anything (Thankfully!)   You can hide these if the devices is "Locked" in restrictions: Show Control Center in lock screen Show Notification Center in lock screen Show Today view in lock screen But not whilst unlocked   Conclusion There are paid for applications that are managed web browsers, allowing much more functionality / lock down, but if you want to avoid that, and are willing to forgive some of the shortcomings of iOS, then the above should give you a locked down iPad, with a Web Clip that takes you to a single website!   ... View more