Meraki

jared_f · ‎Jul 24 2019

Do you plan on using this iPhone in production in the future and would want it to be in DEP? To make your life easier, I would just remove the device from the DEP profile in Meraki. You need to do this prior to doing a factory reset -- the DEP configuration comes down once the device is activated (once you start setup). Another option is to remove it from the DEP scope and then remove it from Apple Business/School Manager by either (a) removing it from scope of the Meraki server or (b) fully removing it from DEP.

jared_f · ‎Jul 24 2019

@Paul_CELP How is your DEP enrollment setup in Systems Manager? Are the devices added to that enrollment. I haven't done a direct phone transfer, but if your DEP enrollment is properly setup and allocated to the correct devices it should force them at the end of the transfer to enroll. You need to make sure that you are making enrollment mandatory and the MDM profile non-removable. While I have never directly done so... I have worked with iCloud backups... My recommendation to you is to get your folks in the habit of using iCloud backup and having it configured. Are phones are heavily restricted so they use little data and only the apps I push out so the 5gb isn't and issue for us. I know when I take a backup of phone "A" and restore it on phone "B" during setup phone "B" goes through DEP after that backup is restored.

jared_f · ‎Jul 12 2019

I agree with all of the above. The big thing for us is infrastructure. We ditched our last server in 2007 and all of our services are hosted. Meraki was one of the first to offer a hosted MDM suite and is one of few currently offering a camera suite w/o the need for an NVR. The cost is a little more, but for a smaller team makes more sense in my eyes.

jared_f · ‎Apr 6 2019

The Meraki agent is generally broken. I would say that is the culprit of this specific problem.

jared_f · ‎Dec 16 2018

@MikeMandalorian Add an exclusion tag to the restriction profile causing problems and then add that exclusion tag to the device you want to exclude. Follow the example below. Use WITHOUT ANY of the following tags Add iOS Devices & Exclusions Make sure installation target states: iOS Devices without any of the followings tags Exclusions

jared_f · ‎Dec 5 2018

@licenseNOW When a license is assigned to a device, it is revocable. Navigate to Systems Manager > VPP (under "Manage" Heading) and check the app you are having problems with then click "Edit Auto Management" and check the following options. Finally, click Apply changes and your license count should update. I prefer to apply these options to all app I place in Self Service for users.

jared_f · ‎Oct 21 2018

You guys are not the only one seeing this problem. Things are just becoming ridiculous with Meraki. We don't have plenty of Mac devices, but a decent amount of iOS. Jamf is sounding better and better each day for out use case even though it comes with a hefty price tag. I understand bugs; but the amount of them is ridiculous and support's response is either a sham work around or to submit a wish. Why bother updating the SM UI when other features are needed and the community shows interests in them? For example, the automated naming of iOS devices based on a users directory username has been a feature that has received top kudos from the community. We are responsible for rolling out a mobile clock-in/out app for employees by 1/1/19. This is going to require enrolling each users phone and pushing the application out. Reliability of this is mandatory. Ok... rant over!

jared_f · ‎Sep 27 2018

I haven't come across that specific error, but the things that usually pop out to me are APN certificates or a network problem (something is blocking Meraki/Apple from syncing down the profile). Seeing that anything prior to 10.13.4 is enrolling, I am pretty sure you can rule those out. The only other option I could think of is to manually retrieve the profile from dashboard instead of running manual enrollment from m.meraki.com. Another option would to be a force install of the profile via the command line.

jared_f · ‎Sep 27 2018

I would look into USB tethering. I believe it was released in iOS 11 last year.

jared_f · ‎Sep 21 2018

Block Apple update servers on your network if you don’t want people updating. Then setup a policy to alert you if anybody circumvents and updates.

jared_f · ‎Sep 21 2018

jared_f · ‎Sep 21 2018

This is already a feature in the restrictions profile. The day limit is an Apple limitation, not Meraki.

jared_f · ‎Sep 20 2018

I know the bluetooth restriction locks the toggle off if it is set to off when the configuration profile is pushed. But it doesn't allow other devices to be paired? Very stupid on Apple's part. Would it be possible to use the Meraki API to send the bluetooth on command to all devices every "x" minutes? I would set it to two minutes and eventually people would just get tired of turning it off.

jared_f · ‎Sep 7 2018

Pushing app credentials is not possible.

jared_f · ‎Aug 20 2018

I am curious to also know what Valicert is. A quick Google search shows it has something to do with GoDaddy as @MRCUR stated. According to some post, it was something in the 1990s that is now being phased out do to encryption standards.

jared_f · ‎Aug 20 2018

Happy Birthday, Meraki Community!

jared_f · ‎Aug 15 2018

@Josh3 DEP and VPP are all now under "Apple Business". No Apple IDs are required for each device. You can use device based app installation and either make the apps available in the Meraki MDM app for the user to install or install them on demand.

jared_f · ‎Jul 24 2018

@Namik I have been begging Meraki to allow us to use a blacklist policy to kill the process, but it has not been implemented. I invite you to "submit a wish". Are you user's admins? If not, you could use OSX server and create a "folder restriction" with the path to pages. I have went ahead and created the payload for it and here is a Google Drive share link. It works fine on my MacBook Pro - pages won't open with the error: Only admins can get around it. Drive link: https://drive.google.com/file/d/1txtoOPsxWrM21xX5dutV_Z7otsHfe69D/view?usp=sharing Hope this helps, Jared

jared_f · ‎Jul 20 2018

We don't have a large amount of Macs. But this is our procedure. The device is assigned to the user with there AD credentials (during DEP) and the appropriate profiles and apps come down. During setup, the local account is an admin account (we call it "techlocal") is created. After verifying that the AD bind was successful (configuration profile) and the login page profile came down, we hand it over to the user - they login with there AD credentials and a mobile account is created. Anytime they are on the corporate network, we rsync via a script at login all there local data (Files on the Desktop, Documents, Photos, Videos) onto there network home (stored in an SMB share). The network home acts as a backup for there data. We played with the idea of ditching AD and using something like NoMAD to "lose the bind", but keep the benefits of AD (kerebos), but decided against it as we have no problem with AD.

jared_f · ‎Jul 20 2018

You could use create user PKG, but I would be very careful and make sure SM recognizes it as installed!

jared_f · ‎Jul 19 2018

I am 95% sure that G Suite authentication cannot be used with Meraki. While it might be a pain, I would move all your Apple devices into a separate network and disable authentication.

jared_f · ‎Jul 13 2018

It is DEP, they don't exactly "auto configure", the device is setup in Meraki to receive certain apps or profiles.

jared_f · ‎Jul 5 2018

Looping in @Melissa to see if engineering is aware.

jared_f · ‎Jul 5 2018

I am seeing this. I did an app inventory on a device and suddenly, all catalogued apps came down. I am nervous that as soon as devices begin inventorying that apps are going to start coming down.

jared_f · ‎Jun 29 2018

Triggering the activation in Apple Configurator 2 before handing the user the iPad has helped. I have noticed this delay also.

About jared_f

jared_f

Community Record

Badges