Meraki

jared_f · ‎Jan 24 2018

@RoboTech I have an older Apple TV and I will give it a go tonight and report back. On a side note and out of curiosity, have you played with Jamf Pro 10? I really liked the software when we tried it, but that was version nine. I have been debating whether to buy myself a personal license to play with, but I haven't seen anything on the iOS side of Jamf that really makes me want to switch. In my opinion, Meraki is close and catching up day by day to Jamf.

jared_f · ‎Jan 24 2018

No Jamf server to compare it on. Meraki only here. That is the only thing I could think of. Could you add it to DEP or is that only for newer Apple TV's?

jared_f · ‎Jan 24 2018

@RoboTech I have only enrolled the newer Apple TVs. Have use dropped a WiFi profile on that device and/or connected it via ethernet. From my knowlege, enrollment cannot take place fi there is no network connection. Jared

jared_f · ‎Jan 23 2018

I know for Mac OS youc an force filevault and firewall via a configuration profile. I am not sure about Windows.

jared_f · ‎Jan 23 2018

Unfortunately, we cannot do that because our users install profiles that we make available to them to join WiFi networks. I wish Meraki would let us set up a policy to see that only whitelisted profiles are installed.

jared_f · ‎Jan 23 2018

@DCooper Is correct about that specific restriction. As a side note, that does not impact Meraki from installing any profiles. If you are asking what supervised does, it just allows you as an admin to push more settings to the device. Supervision can be done via Apple Configurator 2 or DEP (which is now mandatory). Jared

jared_f · ‎Jan 22 2018

Just got a minute to try it out. Great updates... loving the ease of deployment for software. Maybe I can finally move to DEP enrollment with our Macs. Jared

jared_f · ‎Jan 22 2018

@Melissa Thanks for checking. I am sorry for not coming out and saying that a device swap was needed. I thought we were referring to a deployment with devices being swapped. You can also do the following: Backup Device A Restore Backup on Device B (forcing it through DEP) Backup Device B Restore Back on Device B and DEP should come down This is very frustrating and is an Apple issue that needs to be addressed.

jared_f · ‎Jan 22 2018

You don’t have to guess what is being deployed to your device. Do a search in the dashboard and load up the device and look at the installed profiles. Then you can edit your scope of things from that.

jared_f · ‎Jan 21 2018

Hi Folks, We have been running into an issue with an app we originally distributed on our Apple Configurator 2 configured devices. The issue is Apple limits us to only removing managed apps. I ran into this work around on another forum so I thought I would share here also! First what I did was create a policy that looks for the app (I used the blacklist option). What I did was add the app to Meraki and checked "Attempt to Manage when Unmanaged". I also disabled auto install so this app would not be distributed to any of our devices on accident. I scoped this to the policy based on not being in compliance. This populated the app group and to force that app to be managed quicker I selected all the apps and went to "Managed" and pushed "Update/Reinstall". Then this allowed me to go to each device and remove that app because it is now managed. Hope this helps anyone else running into this issue. I think this would be handy feature to build into Meraki, something to allow you to quickly manage an app without adding it to your app catalog like your goal is to distribute it. Jared

jared_f · ‎Jan 20 2018

@CherylA That may be your issue.

jared_f · ‎Jan 19 2018

https://www.reddit.com/r/ipad/comments/5gogol/restoring_from_an_icloud_backup_to_a_depenrolled/

jared_f · ‎Jan 19 2018

@CherylA Just to verify, did you remove the Meraki MDM profile from your 6S before restoring it to your new phone?

jared_f · ‎Jan 19 2018

I reached out to a friend at Jamf. Hoping to get some clarity. This has been really bugging me lol. Apple seems to put safe guards in place so we as admins don't abuse power, but they also make things difficult at points too. Jared

jared_f · ‎Jan 19 2018

I will monitor my post on the other community. I am also going to reachout to my buisness team at Apple and see what there support states.

jared_f · ‎Jan 19 2018

@CherylA I reached out to another community of Apple admins about your issue and I am going to see if anyone lets me know they are seeing the same thing. Just to make sure, did you go into Meraki and verify settings were assigned under DEP for that device that forced supervsion and made MDM mandatory?

jared_f · ‎Jan 19 2018

@CherylA That may be the case. Seems to be working fine with the iPads. I believe we should open a support case with Apple. It is very problematic if what you are saying is true.

jared_f · ‎Jan 19 2018

@CMurdaugh Yes it will. While I don't disagree with the fact that users can just "sync" their information to iCloud a lot of people like having the apps download and having text restored. The Device Enrollment Programs purpose is to force managmement, lock profiles, and supervise devices. Apple has built an intended fail safe that if a user selects and unsupervised backup the device will become supervised by any means possible. So yes! A user can restored an unsupervised backup on an iPad if the following pre-requistes are met: -Device was added to DEP (Apple Configurator, Purchase # from Apple, Etc.) -Device was assigned to your Meraki MDM Server -Enrollment settings are pushed from the Meraki dashboard before the user begins setup. It really makes no sense and would defeat the reason Apple created this program if a user could just select an unsupervised backup and get around DEP (supervision, profile being mandatory.)

jared_f · ‎Jan 19 2018

I can assure you that if you backup to iCloud meraki will come down on the device. I will make a video walk through to show this.

jared_f · ‎Jan 19 2018

As I posted in the discussion regarding restoring from backups I thought I would post it here so it is easy to find in the future. Here is how to add existing devices to DEP and how to restore from a backup. https://drive.google.com/file/d/1tg-o2PYgmEL7qUkPLAQQuQ-T5QZZ7I6q/view?usp=sharing

jared_f · ‎Jan 19 2018

Hi Everyone, I put together a quick guide on this topic. The TabPilot video in the guide is really great and covers the basics of configuring DEP to allow you to enroll devices not bought from Apple, watch it first. Please excuse any typos, I did this in a tad of a rush - but there seems to be a little confusion and hesitation and I thought this would be a good idea to throw out there. Here is the guide: https://drive.google.com/file/d/1tg-o2PYgmEL7qUkPLAQQuQ-T5QZZ7I6q/view?usp=sharing As noted in guide, please don't hesitate to reach out if you have any questions for me! Have a great weekend! Jared

jared_f · ‎Jan 19 2018

Hi All! Restoring from a backup is possible with DEP devices. During DEP the device becomes managed and supervised no matter what. Please have your users make a backup, add the device to DEP with Apple Configrator 2, and assign DEP settings within Meeaki before the user starts setup. I plan on writing a guide and doing a video walk through if possible to clear this matter up! jared

jared_f · ‎Jan 18 2018

@Diane I just have "Auto Install" checked in my managed apps. If a user deleted the app it will reinstall when the device checks in.

jared_f · ‎Jan 18 2018

Lol... that is my specialty!

jared_f · ‎Jan 18 2018

Hi All! From my understanding you can tag individual devices before they go through DEP and they will receive the appropriate settings. But, is there any way of including standard tags within that DEP settings tab so I don't have to tag each devices and/or mass select devices to tag? Thanks! Jared

About jared_f

jared_f

Community Record

Badges