Meraki

ekramer · ‎Oct 24 2024

I've wondered the same thing. In my head the answer is "not often enough" but what I'd really love to see is a schedule... perhaps even a modifiable schedule... per app.

ekramer · ‎Aug 28 2024

In my experience then either the signing certificate on the profile was replaced, in which case you'll have to either restore the updated correct certificate in Meraki or wipe the machine and re-enroll with the new different certificate, or the agent has just gone so far out of date that it cannot update itself. There is an uninstaller for the agent available under the Systems Manager > Add Devices that can uninstall the agent before you attempt to install the most up-to-date agent. Note that you will need to restart the device between uninstalling and installing, again. Finally, it is worth checking and confirming that your network is working correctly for other devices.

ekramer · ‎Jun 4 2024

Thank you for this detailed post. Any ideas how to create a Lost Mode Manager role that would only allow device lookup and Lost Mode enable/disable process?

ekramer · ‎May 30 2024

Mine works, redirecting to https://n11.meraki.com/Waynflete-Manage/n/PvCWIcl/manage/support/help

ekramer · ‎Apr 22 2024

We are purchasing solar panels to outfit one of our tallest buildings, and will be adding to new buildings as we move through phases of construction.

ekramer · ‎Mar 3 2024

Thanks for the detailed writeup. I wonder why you don't use User Tags for some of these, e.g. team. I find this helpful for people (like students) who may change devices, as the tags travel with them instead of the device.

ekramer · ‎Feb 14 2024

I was just glancing at last year's contest and came upon the first comment thread there, and it linked to a topic I'd been wanting to find for a long time:https://community.meraki.com/t5/Community-Announcements/CONTEST-CLOSED-%EF%B8%8F-Happy-Valentine-s-Day-%EF%B8%8F/bc-p/184725/highlight/true#M8013. Thanks @KRobert

ekramer · ‎Jan 12 2024

Thanks! I never expected it, but will enjoy keeping warm.

ekramer · ‎Jan 9 2024

I second this: one aspect of the Systems Manager I would love to have is dynamic group functionality (ie custom auto-tags). I’d love to implement this functionality via the API, if possible.

ekramer · ‎Jan 9 2024

If you haven't already, you'll need to wipe and reset these devices.

ekramer · ‎Oct 3 2023

No. There is only one option for access level for the organization as a whole (None / Read-Only / Full) and s secondary option on a per-network basis (None / Full / Read-Only / Monitor-Only).

ekramer · ‎Sep 29 2023

I don’t believe Meraki has a IDP tool for Google accounts on macOS, but there maybe some 3rd party tools that you can hook into Systems Manager. You’ll probably need to configure Google authentication for Apple IDs, as well, to tie it all together.

ekramer · ‎Sep 12 2023

Unfortunately, Meraki SM doesn't have smart groups in the way that JAMF does. I believe you may be able to script this outside the Systems Manager using their API, though.

ekramer · ‎May 10 2023

I believe this is not an issue with device management or supervision, but managed Apple IDs are documented to have certain limitations. See https://support.apple.com/guide/apple-business-manager/use-managed-apple-ids-axm78b477c81/web for more information. I believe the issue has to do with managed Apple IDs not using 2FA in the same way as personal Apple IDs. In otherwords, the user doesn't hold all the security keys with managed Apple IDs.

ekramer · ‎May 2 2023

I had a cached cert. On refreshing my Meraki dashboard it pulled down the updated cert with dates into 2024.

ekramer · ‎Apr 24 2023

We've removed carts of computers that were continually charging and now just hand out individual devices when needed (manually, via the library) so only a few devices need to be kept charged at a time.

ekramer · ‎Jan 18 2023

Another way to look at is that the device itself does not know what tags it has... only the MDM does. The MDM thus decides when to send commands to the device. It doesn't matter how a device is scoped to receive a profile (user tag / device tag / etc.) as long as that device continues to be in the scope of the profile. If you removed the device tag first, and then added the user tag to the scope of the profile (and pressed "Save" in between) then you would be taking one step to remove the profile and then another to add it back on.

ekramer · ‎Jan 18 2023

If the device list doesn't change, then the devices will not be sent a command to add/remove the profile. In other words, you should be just fine.

ekramer · ‎Dec 9 2022

There's your answer, then. Managed Apple IDs are allowed to browse the App/iTunes/Books store, but not purchase (paid, or free). See [Managed Apple IDs for Apple Devices](https://support.apple.com/guide/deployment/managed-apple-ids-depcaa668a58/1/web/1.0) for more information.

ekramer · ‎Dec 9 2022

Just curious, but what kind of Apple ID is the user signed in (to the App Store) with? Personal Managed None

ekramer · ‎Nov 30 2022

techerkramer I've been folding since the last challenge! I love to see this running, again.

ekramer · ‎Oct 26 2022

Unfortunately, there is no "Keep App Up-do-Date" option on macOS apps, even for App Store apps. Instead, an admin has to click the button "Refresh details" (and then press the floating "Save" button) to get the updated app into Meraki. Any reason this may be (when the iPadOS / iOS apps are able to be kept up-to-date)?

ekramer · ‎Oct 21 2022

I worked in a town with a community pool. The switch closet was not airlocked from the chlorinated air; the switch expired faster than an out-of-shape lifeguard.

ekramer · ‎Sep 29 2022

To send a push notification message to the iPad devices, you need to (A) have the Meraki MDM app installed and (B) the user must allow it to present notifications.

ekramer · ‎Sep 26 2022

We found the solution to our issue by checking the System Manager > Configure > General > Network Locations. As documented, the location we set for our public IP overrode all other methods of displaying the location of the device. Removing the override location allowed the lost device to display its GPS coordinates accurately. I posit that this is an erroneous feature, as the devices' own GPS location should always take precedence over a calculated location based on IP. As noted in the documentation, IP-based geolocation is the last of the options that should be used to calculate a device's location.

About ekramer

ekramer

Erik Kramer

Community Record

Badges