Sorry y'all, I noticed someone tried to access the guide via Google Drive and it did not work. I am in the midst of consolidating my email and moving my data to OneDrive! Should be fixed above, but here is the link if you are still having issues.   https://flittorg-my.sharepoint.com/:b:/g/personal/jaredflitt_flitt_org1/EU5-feCrhylBnvFifzuDQy8BK5apuIafBOk_6A9RQTIsKQ?e=P2L6W4 ... View more

Hi @ArthurJames, do you have Zoom? I haven't been playing around with Meraki MDM too much over the last year (though I still do glance at it). That being said, I was the lead on the management and deployment on Jamf Pro at my University for our iOS and Mac management platform and I did all the integrations with Apple School Manager. Are you using an SIS? My high school relied heavily on PowerSchool when they implemented Apple Classoom. My university uses a product called Banner from Ellucian, I always wanted to build the bridge but they weren't too Apple friendly and I have moved on from my day to day work there. I might by a little Meraki rusty ~ but I am sure I can help! ... View more

Do you plan on using this iPhone in production in the future and would want it to be in DEP? To make your life easier, I would just remove the device from the DEP profile in Meraki. You need to do this prior to doing a factory reset -- the DEP configuration comes down once the device is activated (once you start setup).   Another option is to remove it from the DEP scope and then remove it from Apple Business/School Manager by either (a) removing it from scope of the Meraki server or (b) fully removing it from DEP.     ... View more

@Paul_CELP How is your DEP enrollment setup in Systems Manager? Are the devices added to that enrollment. I haven't done a direct phone transfer, but if your DEP enrollment is properly setup and allocated to the correct devices it should force them at the end of the transfer to enroll. You need to make sure that you are making enrollment mandatory and the MDM profile non-removable.   While I have never directly done so... I have worked with iCloud backups... My recommendation to you is to get your folks in the habit of using iCloud backup and having it configured. Are phones are heavily restricted so they use little data and only the apps I push out so the 5gb isn't and issue for us. I know when I take a backup of phone "A" and restore it on phone "B" during setup phone "B" goes through DEP after that backup is restored. ... View more

Sadly no, I installed the Meraki agent on a PC already bound to the domain. Then in order to populate a user the device needs to be enrolled again.   I actually did find a use for JumpCloud. To connect to WiFi it is WPA2 Enterprise with AD and your IP gets issued via Windows DHCP. I can fully shutdown my domain and authentication fails over to JumpCloud and DHCP fails over to my Synology HA Cluster and the DNS is changed to 8.8.8.8 and 8.8.4.4 -- that was the only use I found for JumpCloud in the end. ... View more

Are the devices joined to Meraki using just the agent or also the MDM tie-in (if it is even in Windows 7 -- I know it is in Windows 10)? If so, I believe if you remove the MDM connection, run the agent uninstall script, then delete the device from Meraki (in that order), it removes it. ... View more

I agree with all of the above. The big thing for us is infrastructure. We ditched our last server in 2007 and all of our services are hosted. Meraki was one of the first to offer a hosted MDM suite and is one of few currently offering a camera suite w/o the need for an NVR. The cost is a little more, but for a smaller team makes more sense in my eyes. ... View more

I would go with the newer ones. A site walk through is your best option and see is panoramic might work best to eliminate multiple cameras in certain areas. ... View more

I also have RD issues with Meraki. ARD is my best friend. Using the profile + kickstart command you can successfully enable in on Mojave. ... View more

Glad to hear. The certificates can be a real pain.  ... View more

Hello All! Try reaching out to your local Apple store. They have been a great point of contact and very helpful for me. ... View more

The Meraki agent is generally broken. I would say that is the culprit of this specific problem. ... View more

I have never run into this specific issue, but is there one central account you used when signing up for Apple Business Manager and/or DEP? I would use that email and password and try re-syncing. This might be a Meraki issue though. ... View more

Also experiencing a similar problem. It seems Meraki doesn't like having to DC's plugged in or it throws off the sync. I removed one DC and re-synced AD groups and it seemed to have solve the problem.  ... View more

@PeterJames Noticed the same thing here. Our domain controllers were re-done and Exchange moved from 2010 so we re-enrolled everything with the agent so we can query for AD membership. ... View more

@misterharrison The rule is that the most restrictive profile will take precedence. Having separate profiles is not a problem. You can leave your Meraki profile in place. ... View more

@PeterJames As long as you do those two fixes above it should be pretty smooth rolling out the custom profile. The only thing is the software updates will be delayed 1 day. I will look into editing the actual profile code and seeing it that solves the bugs I am seeing.    I agree with the bluetooth problem (especially in K-12 for Apple Classroom). My recommendation is to enforce the bluetooth restriction on any new DEP devices. In addition, you could possibly send the bluetooth command to your entire fleet and then tie that to a timed configuration profile to take effect 5 minutes after the command is sent then edit the scope to make sure is stays static. It is all about timing!   Jared ... View more

@licenseNOW   When a license is assigned to a device, it is revocable. Navigate to Systems Manager > VPP (under "Manage" Heading) and check the app you are having problems with then click "Edit Auto Management" and check the following options. Finally, click Apply changes and your license count should update. I prefer to apply these options to all app I place in Self Service for users. ... View more

All,   In addition, I cannot stress the importance of fixing those current bugs in any restrictions profile you make in Apple Configurator 2 (available in the Mac App Store for Free) by setting software updates to 1 day and checking it and checking the two contact settings. I also want to bring attention to a few issues that can be solved with configuration profiles (especially in K-12).   Issue 1 Sharing of WiFi codes via proximity has been an issue many K-12 admins have brought up on other forums. This can be fixed with an Apple Configurator Profile with the following restrictions - push out both: Proximity password request not allowed Password sharing not allowed   Issue 2 VPN creation to bypass network filtering. This restriction is available in Meraki. This stops user's from configuring manual VPNs in settings, but does not stop VPN apps from working. I use a policy tied to a configuration profile and email alert to take care of this. I am using wildcard matches to take care of this. I published a solution here to take care of this, also add *betternet* and *aloha* to take care of this. Here is my most updated list:   Issue 3 Installing third party "enterprise apps" to bypass app store restriction. Enforce the following - both available in Meraki: Installing configuration profiles not allowed Trusting enterprise apps not allowed Sometimes a policy can help you detect apps like TweakBox and VShare tied to a profile and email notification, but stopping them from being installed in the first place is helpful. There are new ones popping up everyday.   This one is more of a tip, not an issue:   Enforce & Lock Device Name I shared an overview of how I am doing this here. I also invite you to "Make a Wish" for automated naming by pulling AD information (see here for more information).     I hope the above post and maybe some info in here is helpful. Please don't hesitate to reach out to me at my email below with any questions about Meraki SM iOS or Mac related.   Jared Flitt jflitt@caregivershomecare.com             ... View more

Hi All,   Meraki does give you the ability to upload profiles. Here is a write up for everyone to follow:   Step 1: Create new profile. Give it a name, identifier (I usually name it the same as the name), and organization (Meraki Inc. will work for this also).    Step 2: Adjust Restrictions to Take Care of AC2 Bugs Apple Configurator 2 has two bugs to be aware of. Even if you do not check to enforce delayed software updates it will change to 30 days. To get around this, check the software update delay and change it to ONE (1) day. This is the only work around I have found and will save you dozens of Help Desk tickets when none of your devices will update!  In addition, AC2 has some restrictions defaulted to change for contacts that your organization may not to push to your devices. Please check the following below so they DO NOT push (another Apple bug).   Step 3: Add Restriction to Enforce Data and Time Step 4: Save Profile NOTE: Please save you profile with the name you want it to Appear with in the settings panel of Meraki.   Step 5: Upload to Meraki   Systems Manager > Settings > Add Profile Click "Upload custom Apple Profile" and choose it from your save location. Then scope.      ... View more

Tip for everybody. If a restriction is available for iOS in Apple Configurator you can create the profile there and upload it to Meraki. But, I would like everything to be in Meraki to make changing restrictions easier.  ... View more

We would also like this and Meraki to provide support for ALL new restrictions. Jamf has day one support. ... View more