Meraki

Melissa · ‎Jul 17 2018

@BlakeRichardson - oh no, that sounds like a huge hassle! There are some tools Apple has made available to help in this process. The first is "Activation Lock Bypass" - it's available on the device page under Mobile Security. The device does need to be enrolled in DEP and have Supervised settings applied for this to work! You can also prevent users from logging in with personal icloud/itunes accounts on a device...but usually folks want to allow end users to do this to back up their devices or download personal apps. If you did want to block this, it's under Restrictions> ios restrictions (supervised)> "Allow modifying account settings" It didn't sound like this was an issue in your case - but like Android, you can also prevent users from factory reseting the device under Restrictions>ios restrictions (supervised)> "Allow Erase All Content and Settings" Hope that helps in the future!!

Melissa · ‎Jun 25 2018

Here you go! Hope this helps. https://documentation.meraki.com/SM/Device_Enrollment/Apple_MDM_Push_Certificate

Melissa · ‎Jun 21 2018

Hi @Fiza! To prevent users from logging in to email accounts on anything other than "known", SM-enrolled devices, I've seen organizations do the following: 1 - Set up both username/password and certificate authentication on their email server 2 - Encourage users to install SM to get access to school/company email (and wifi networks, VPN, etc.) 3 - Pushing Email Configuration Settings (Managed App Settings for Gmail, on Android devices) AND Credentials to SM-enrolled devices The above would ensure that only devices with the SM-pushed certificates would be able to log in to email accounts. Here are some additional resources on this! https://documentation.meraki.com/SM/Profiles_and_Settings/Configuration_Settings https://documentation.meraki.com/SM/Deployment_Guides/Android_Enterprise_Deployment_Guide

Melissa · ‎Jun 19 2018

@PhilipDAth - Also, did you see that Command Line Requests are now logged under Network Wide > Event Log? Hope that helps you track commands!

Melissa · ‎Jun 19 2018

Hope you feel better, @PhilipDAth! Thanks for the great video 🙂

Melissa · ‎Jun 18 2018

Hi everyone! I hope you’ve had a chance to see this post on the new Community Video Challenge! I know folks on the Systems Manager / Endpoint Management page are particularly great at sharing their tips and tricks with others. To give you an additional chance to win, the SM team at Meraki will be looking at all SM-related video submissions and awarding the top 3 entries a fabulous Meraki mini-fridge (shown below - perfect for holding a few cans/beverages on your desk)! Please submit all videos through the post linked above. Contest details are also provided through this link. We’re excited to see what you come up with! Just in time for summer 😉

Melissa · ‎Jun 4 2018

I'm late to this thread, but good catch @Jason_B!! This is under "Allowed Content Ratings" on the Systems Manager >Settings page under "iOS and macOS Restrictions"

Melissa · ‎Apr 25 2018

Hi @sshort! We should have a new guide on this configuration setting posted soon on our Documentation site. I'll post a link to it in the Community asap!

Melissa · ‎Apr 25 2018

@jared_f @alexis_cazalaa - I think this is something that is unclear on the end device UI. When a bluetooth restriction is set, the user actually CAN'T change that in the control center...it just LOOKS like they can. Is what you're seeing when you test the actual bluetooth connection- after setting a restriction and trying to disable bluetooth in control center?

Melissa · ‎Apr 25 2018

Hi all! We just posted a blog that highlights some of the new features available for macOS and iOS. Some of these were developed after the iOS 11.3 and macOS 10.13.4 release - some we've been working on outside of that 🙂 We'll have a full list posted under Help>New Features in dashboard shortly! Please make sure to submit any additional feature request in the Make a Wish box in dashboard! We certainly welcome discussions about these in the Community as well - but requests posted in dashboard are actively tracked and monitored by our SM team. Here are some of the highlighted new features: Delay OS updates for up to 90 days on iOS and macOS: Providing time for IT teams to vet and test new OS versions before they are deployed on managed devices. Keep apps up to date on iOS and macOS: Select for specific App Store apps to automatically update when a new version is available. Disable bluetooth settings on iOS and macOS: Limit distractions and security loopholes by locking down the bluetooth functionality on devices through the live tools on a device page. IT teams can use this in conjunction with bluetooth restrictions settings to lock bluetooth settings on or off. FileVault Personal Recovery Key (PRK) Escrow: Store PRKs for disk encryption on macOS devices. Login window: Set custom login window messages for macOS devices to alert users of management or convey organizational messages. Lock screen: Specify a custom lock screen asset tag on iOS to easily identify a device in hand. App Store Restrictions: Restrict end user app installations and updates for more control of apps and app versions on macOS devices. Airprint: Set printer configurations for iOS and macOS devices. Dock: Change size, magnification, position, minimization effect, and more macOS dock settings. Setup Assistant: When re-provisioning a macOS device, select to skip steps like Siri setup.

Melissa · ‎Apr 19 2018

Hi everyone! Meraki will be coming to the ISTE education show in Chicago this upcoming June 25-27! Come by to meet more of our team (myself included) and talk about SM! More about the event here - https://www.iste.org/ Are there other upcoming events you'd like to see us at? Please let me know!

Melissa · ‎Apr 17 2018

@jared_f - if you use the Tags management page to set a Security Policy, you should be able to set a policy that is device type specific (iOS only), to avoid your macos devices hitting it. Does that work?

Melissa · ‎Apr 16 2018

@jared_f @sshort Thank you for explaining!! That's interesting - I'll definitely put in the request on my end. Have you both submitted this through the "Make a Wish" box?

Melissa · ‎Apr 16 2018

Hi @jared_f! Where/how would you want to search for this?

Melissa · ‎Apr 12 2018

Hi all! I wanted to remind everyone that if you've never posted before in the Community - there are still a few days (until 4/15) to submit your first post to win some Meraki gifts! If a question has been on your mind, or if there's a cool way you're using SM that you'd like to share...now's the time! Here are some guidelines: New topics, replies to topics, and comments on blog posts all count! However — there must be content in the post, and if we determine that it doesn’t fit into our community guidelines, it won’t be eligible. Here are some easy ways to get started: Introduce yourself and tell us where you’re from on our introductions thread. Check out the unanswered questions to see if you can lend a hand: Endpoint Management / Systems Manager Ask a question Just say "Wow!" or "Woah!" in response to some of the Before and After pictures Here's the full post on this easy challenge - https://community.meraki.com/t5/Community-Announcements/It-s-First-Post-Week-All-first-time-posters-are-eligible-to-win/ba-p/16340

Melissa · ‎Apr 12 2018

Location services can be disabled by the user - this is an apple restriction/requirement for the time being. The work arounds described in this thread are definitely an option! Another feature to be aware of is Lost Mode (for supervised devices) - which will "wake" location services, even if the user has disabled them. It wont lock location services on once Lost mode is disabled, which sounds like what you're looking for. Thought I'd mention it anyway 🙂 https://documentation.meraki.com/SM/Monitoring_and_Reporting/Using_Lost_Mode_to_Recover_Missing_iOS_Devices

Melissa · ‎Apr 12 2018

Kudos for finding this!! You all beat me to a Community post earlier this week 🙂 This feature is part of a larger rollout we'll be announcing soon! Stay tuned for more!

Melissa · ‎Apr 12 2018

@DanHarmon - also - for Supervised devices we just released the ability to disable or enable bluetooth on iOS. This can be done on an individual device (from that device's page in SM) like below Some folks in the Community have already noticed this new feature in dashboard!! We'll be making a larger announcement about this and other upcoming features soon 🙂

Melissa · ‎Apr 12 2018

@DanHarmon - if you can't work with Apple to get those added to your DEP on the backend, there is always the option of manually enrolling the ipads in DEP using Apple Configurator 2 (as long as they are running at least iOS 11) More on that here https://documentation.meraki.com/SM/Device_Enrollment/Enrolling_and_Supervising_iOS_Devices_using_Apple_Configurator_2.5_or_Later#Manual_Enrollment_-_Add_device(s

Melissa · ‎Apr 10 2018

Hi everyone! For those that were unable to make our feature update webinar last month - here is a link to a recording on our youtube channel: https://www.youtube.com/watch?v=v_iSgzY3KqE&index=2&list=PLTVCI_tE32rS41jiv4EcoSjZqHoRxbPIy This includes feature updates on: - macOS - iOS - Chrome OS (Enterprise) - Android Hope you enjoy it!

Melissa · ‎Mar 26 2018

@PhilipDAth - I had thought this was resolved - so sorry there are still issues! This is probably best handled directly with support though - they will have more information about the process and expected behavior. I'm sorry I can't be more helpful!!

Melissa · ‎Mar 26 2018

@sshort - Yes! We will post the video asap from last week's update webinar. I'll make sure to post a link in the Community too 🙂

Melissa · ‎Mar 23 2018

Hi everyone! We recently released the ability to automatically install the SM agent alongside the enrollment profile for Mac devices! This allows for out-of-the-box enrollment with DEP and saves you from having to manually install the agent on devices as part of your SM setup. Thank you to all of our beta users for your help and feedback on this feature! Of course, for those that would like to continue to have either the agent or enrollment profile in use (but not both) - this option is still available! If you're not sure what either gets you (the enrollment profile or the agent), check out the article linked below for more info. Here's our guide for more information. For Mac devices with an SM enrollment profile set up - you'll see the SM Agent on the apps page (like this below):

Melissa · ‎Mar 23 2018

@Jacko - Just checking on this - have you removed the SM agent AND the enrollment profile? Either one will continue checking in to SM. Here's more on that... https://documentation.meraki.com/SM/Device_Enrollment/Uninstalling_Systems_Manager_and_Removing_Managed_Devices You can always call in to support as well! I would say the only time to avoid (if possible) is 11-12pm PST. That tends to be the busiest time - in general.

Melissa · ‎Mar 21 2018

@PhilipDAth - that's right, dashboard will not let you copy profiles between dashboard ORGs, but you can between different networks in a single org. (I wish we had this! I submitted this request.) It sounds like in this case @Jacko is looking to copy profiles between networks (in one org) and not between orgs.

About Melissa

Melissa

Community Record

Badges