Meraki

jared_f · ‎Feb 28 2018

@BlakeRichardson Usually when you remove a device from Meraki dashboard and re-enroll, it is fresh. I am wondering why you are experiencing this issue. Anyways, you could use the apple script below to remove the agent: on onConfirmUninstall() set applicationName to "Meraki Systems Manager" try display dialog "Are you sure you want to uninstall " & applicationName & "?" set uninstallScript to quoted form of POSIX path of (path to resource "uninstall.bash") do shell script "bash " & uninstallScript with administrator privileges display dialog "Successfully Uninstalled " & applicationName buttons {"OK"} default button "OK" on error err if err contains "User canceled" then display dialog "Canceled " & applicationName & " Uninstall" buttons {"OK"} default button "OK" else display dialog "We're sorry, but there was an error uninstalling " & applicationName & " described as: " & err buttons {"OK"} default button "OK" end if end try end onConfirmUninstall onConfirmUninstall() You could edit it so it requires no user interaction. I found this in Dashboard > Clients > Add Devices > MacOS > You will see a button to download the uninstaller. It is just an Apple Script app, I just opened it an extracted the code. Jared

jared_f · ‎Feb 28 2018

Upon further investigation, no command should be needed to install from a DMG. I tested it by creating a dmg with just an app inside and pushing it, installed just fine. I would check to make sure that the DMG is just the app, nothing else, upload it to the Meraki cloud and push. Why would you need to wrap the pkgs into DMGs? This may be your issue. A DMG should just contain a .app file.

jared_f · ‎Feb 28 2018

@sshort Is this running on the new beta of software distribution? I have a personal preference of installing from pkg files so I do not have a lot of experience here. Anyhow, I know DMGs mount on the users desktop and you usually drag the item to the application folder. I don't think Meraki knows this by default so you have to use an install command to do so. Hopefully, this helps: *I am assuming that Meraki does the mounting and unmounting of that volume so don't worry about that command. The third one down it what you need (copying the app to /Applications).

jared_f · ‎Feb 28 2018

@DanHarmon All MDMs pretty much have the same feature set because everything is based on Apple's framework. While I don't think you can set text replacement with a profile, could using the domain profile and uploading/scoping it to your device via Meraki help? You can find the following in Apple Configurator 2.

jared_f · ‎Feb 28 2018

This request would need to be submitted to Apple.

jared_f · ‎Feb 26 2018

@BlakeRichardson They are mobile accounts created from AD.

jared_f · ‎Feb 26 2018

Just curious how you are mounting network shares on your Mac systems. I have a Linux share setup and am going to mount at login. The only issue is that laptops roam off the network and on, I am thinking about limiting the script to only run on devices that are connected to the laptop wifi. Thanks! Jared

jared_f · ‎Feb 25 2018

@MLDigital Are you a licensed account? If so: https://meraki.cisco.com/form/contact

jared_f · ‎Feb 23 2018

Funny part is that I don’t see the LDAP policies section. I have promoted the server to a domain controller. I am going to give support a ring.

jared_f · ‎Feb 23 2018

For some reason I can’t upload a screenshot from my phone. But, it is under Systems Manager > Configure > General Heading > User Authentication Settings Thanks, Jared

jared_f · ‎Feb 23 2018

@PhilipDAth I enabled a certificate on the server using LDAPS and switched the port on my Meraki configuration to use 636. My AD sync is still failing, the funny part is that when I go to m.meraki.com and log in with my AD credentials it works and that specific user syncs over but the groups they are a member of do not sync over. Any other tips you recommend?

jared_f · ‎Feb 22 2018

Hi All, Just curious if anyone here has attended the MacAdmins Conference at Penn State. It is only a four-hour drive from me and it looks very interesting. If you did go previously, was it worth the trip? Jared

jared_f · ‎Feb 22 2018

@BlakeRichardson You could use the "Do not allow the following apps" restriction to blacklist those specific apps. Also, I recommend you push out the restriction that disallows the following: "Allow removal of system apps (iOS 11.0+)".

jared_f · ‎Feb 22 2018

The Server is running in a virtual machine.

jared_f · ‎Feb 21 2018

Just a warning: This is my first time ever touching Windows Server and Active Directory. I configured this all from Youtube videos.

jared_f · ‎Feb 21 2018

Hi Folks, I finally got a Windows Server 2012 R2 lab setup with AD. I have verified that I can enroll devices with a user from AD, but I can't seem to sync over any AD groups in Meraki. I feel it is the way I am setting my AD groups up in Windows Server. Could anyone provide a sample group they configured that syncs to Meraki? Thanks! Jared

jared_f · ‎Feb 20 2018

If Safari was still locked from the device it most likely lost the ability to connect to WiFi and the profile could not update. Or, surprisingly, the profile got corrupted by some unknown force, rare... but it happens.

jared_f · ‎Feb 20 2018

It could have been one of those issues where it just stopped communicating. What symptoms caused them to contact you? Could they not receive WiFi or download apps from the Meraki MDM app?

jared_f · ‎Feb 20 2018

I finally had time to dig into the pile of boxes waiting to be opened and was surprised to find the Meraki Chia! I cannot wait to grow it. I will definitely post some pictures. Thanks, @CarolineS, and team!

jared_f · ‎Feb 20 2018

I would open a support ticket with Meraki. Usually, those are the three things I check - APN, Licensing, Manual Enrollment. Hope that helps, Jared

jared_f · ‎Feb 20 2018

@BlakeRichardson I will keep that in mind during my testing. While Meraki SSP is great, it is clearly still in beta and not stable enough to push.

jared_f · ‎Feb 20 2018

@AkeMalmgren I don't think so. Are your iPads DEP enrolled? If so, remove authentication and see if you can get them pinging Meraki again. You could forward the IP address and location to the police. While you could start restricting the device with a profile, try to make it as transparent as possible not to tip them off!

jared_f · ‎Feb 20 2018

@Bruce_Sayers Users can keep you on your toes. I started providing our WiFi via certificate and a network payload. If you don't want your device enrolled, enjoy the data bill. All of our iPads are DEP and the profile is marked mandatory and cannot be removed. But, even people are trying to get around DEP now, found this latest surprise when I was on eBay a few days ago: https://www.ebay.com/itm/APPLE-MDM-BYPASS-IPHONE-IPAD-IPOD-100-all-iOS-Versions-Fast-service/263268232873?hash=item3d4c026ea9:g:gCYAAOSwvfZaTfGn I wish users could see what I can view in Dashboard, there is this large misconception that I can see text messages, phone calls, photos, and other personal data. It really annoys me, nor am I going to take the time to dig into the information. After seeing the device and seeing if the profile was tampered with, give HR a ring and let them know about these issues. Jared

jared_f · ‎Feb 20 2018

@MikeMandalorian While this would be a nice feature, it is not in the MDM framework provided by Apple so Meraki, nor any other MDM provider can implement it. Your best resort would be to submit a ticket with Apple, good luck on that side of things - I don't even bother anymore!

jared_f · ‎Feb 20 2018

Just took the APC out and plugged it in with just a regular surge protector. When I plugged the APC into new wiring that has been done in the last five years, it is fine and the status indicator is off for the wiring fault. This is an older basement wiring and has not been updated, I am going to have them put in a new, dedicated feed for the rack that is grounded properly. Thanks @BlakeRichardson for your thoughts, I would have never thought it was an APC issue.

About jared_f

jared_f

Community Record

Badges