Thanks @vassallon    A "hard restart" takes much longer, though, in the heat of a lesson!   We have decided to disable that restriction for the time being. We are just surprised that it seems to default to on. ... View more

@vassallon Yes, I understand the effect of the restriction.   What I'm wondering is whether, by enabling this restriction, we might be preventing the use of one of our recommended troubleshooting steps for our end users: namely, turning wifi off and then on again.   As a non-specialist when it comes to wifi connection issues, I don't know if this is even a valid troubleshooting step any more. Are there any wifi connectivity issues that can be solved with a wifi off/on cycle? (probably showing my ignorance here!) ... View more

This new "Force Wifi power on" restriction seems to default to ON, I think?   Is turning Wifi off and then on again no longer a valid troubleshooting step? ... View more

This "Wifi power always on" restriction seems to default to ON.   Is turning wifi off and on again no longer a valid troubleshooting step? ... View more

Well spotted. So now we have to decide if it matters or not. What scenarios can we imagine where we would want to access the location of an iOS device (via SM) without having to put the device into Lost Mode...? ... View more

Just bumping this in case anyone has seen the same behaviour? Or, even better, has a fix?   I've checked on iOS 12.3.1 and the loophole is still there. ... View more

Thanks Adam - sounds like the momentary availability is similar, but in a very different context.   I am surprised no one else here has students who have found this Safari History loophole? Are our students really that ahead of the curve...?! ... View more

Thanks @PhilipDAth , that is what we had tried.   Turns out that one of our departments needs access to some .io sites, so we can't block it after all! ... View more

If I remember correctly, it allows the end user to turn it on, and only then greys out the switch so it cannot be turned off. ... View more

Thanks, @jared_f, I think I remember reading that before. Thanks for the reminder. ... View more

Thanks, @jared_f, there's some really useful information in there - wasn't aware of that AC2 defer updates bug.   What I'm a little confused about is how you can create a profile just to enforce automatic date and time without the profile also applying all the other settings in the restrictions payload? Can you have a profile like this applied to a device AND a Meraki restrictions profile at the same time? And what if the two profiles clash, i.e. one says you can do something and one says you can't?   Basically we were going to replace our existing Meraki-created restrictions profile with an AC2-created restrictions profile, but if we can just use the AC2 one to enforce date and time (and a couple of Apple Classroom related ones) and leave the Meraki one in place that would be much easier. ... View more

Thanks, @jared_f, worked a treat! Also gave us access to some Apple Classroom-related restrictions that some of our teachers were having problems with. ... View more

Hi @PeterJames, I'm afraid I'm not sure exactly what was changed - I suspect that the student moved the year into the future, although I'll have to check with our IT team for the exact details.   We have now tested the process suggested by @jared_f of creating the restrictions Payload in Apple Configurator (including the "force automatic date and time") and applying it via Meraki ("upload custom Apple profile") and it works a treat - greys out the switch so they can't manually change it. ... View more

Just to be clear, this new restriction is not available through Meraki yet, only through Apple Configurator. I am using this thread (and the make a wish button) to try to bring it forward in the Meraki development plan! If other users also use the make a wish button, that might help too. ... View more

Now I understand you, I think!   You are referring to the Restrictions settings on each device (not via MDM) and setting the Location Services in there to "don't allow changes", so that end-users can't change the per-app settings for Location Services, right?   The "Find My Friends" MDM restriction only greys out the overall Location Services switch, but the end user can still go in and change the per-app settings.   In iOS 11 did that restriction default to "don't allow", then? ... View more

@MikeMandalorian Did you try the suggestion in that thread of un-ticking "allow modifying Find My Friends settings" in the Restrictions payload? Greys out the Location Services switch so they can't turn it off. Works a treat! ... View more

See this discussion. ... View more

Mike, I'm assuming you mean the restriction applied on the device rather than pushed through a profile via Meraki (as there is no "don't allow changes to location" option in iOS restrictions via Meraki, I think?). However we have found that unticking "Allow modifying Find My Friends settings" in Meraki has the same effect - it greys out the Location switch to prevent changes. Does this also get broken if the device is updated to iOS 12? ... View more

Can anyone confirm if updating iPads to iOS 12 continues to break Restrictions settings? I haven't tested this myself, but in a school setting having robust restrictions in place is essential. ... View more

Yes, I also noticed some apps updating on one of our iPads and I hadn't pushed any updates out myself. I just need to check that no one else was pushing them out though... ... View more

Yes, activating the web-content filter also prevents clearing the browser history or opening a private tab in Safari. We find it very useful in a school context! ... View more