Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About nbv
Community Record
22
Posts
14
Kudos
5
Solutions
Badges
Aug 29 2024
8:18 AM
In my experience and what others have reported, custom app deployments can be very particular with deployment requirements. If the app can be deployed while creating it's own log file, that would help. You might be able to see more information inside of the Agent Logs for the device inside of Systems Manager. Alternatively, you can look at the logs from the local machine in /var/log/m_agent.log, m_agent.log.0.bz2, m_agent.log.1.bz2, etc. Meraki has documentation on how to enable additional logging that will help you investigate here, there's a specific MacOS section: https://documentation.meraki.com/SM/Other_Topics/Systems_Manager_Logging_and_Troubleshooting#macOS I've had apps install only if I use certain switches or options - even if the software did not require it. Trial and error, and understanding the logs when/if they're helpful will be needed here. Depending on where it's failing in the deployment, you might even be able to schedule a script to run with the app that can provide more info on it as well. I'll add 2 previous threads I was involved with related to custom deployments. Both were for Windows devices but the concept is the same and the same steps can be take on MacOS. https://community.meraki.com/t5/Mobile-Device-Management/Custom-App-Install-Failed-Log/m-p/156316#M9448 https://community.meraki.com/t5/Mobile-Device-Management/Windows-custom-APPs-failing-to-install-need-guidance/m-p/170331#M9648 Hopefully this helps get you in the right direction!
... View more
Aug 27 2024
3:07 PM
I don't use AD enrollment but, updating your LDAP proxy and/or your AD servers (if they're not already) to use LDAPS is probably the easiest. Especially if you were already using AD authentication. Running it with a certificate and turning on SSL/TLS over port 636 is kind of the basis of that. If you don't want to bother with that, you can still fully manage devices inside of Systems Manager. Configure your enrollment settings with a certificate authority cert, create automated enrollment profiles, assign profiles to computers or to users you create in Meraki, use tags to manage device and software deployments, and create profiles inside of Meraki and assign those to your tags. Not sure what your current setup is but, there's a few ways get the end result depending on what you're wanting. Enabling LDAPS sounds like the cleanest option in your case since your basically there already without the encryption.
... View more
May 21 2024
3:04 PM
Same thing here at about the same time. I didn't have time to look at it much earlier and thought it was a formatting refresh similar to the Community site here. Looking closer at it, it appears that something might've broke.
... View more
Mar 8 2024
7:00 AM
2 Kudos
Agreed with @PhilipDAth on device type not being reliable. An alternative I prefer now is to tag devices in Systems Manager and scope a Sentry policy to the tag. Might be a viable option for you if you can do that.
... View more
Feb 20 2024
12:15 PM
4 Kudos
Hi everybody, I figured out the problem and am now able to email support@meraki.com just fine. It was specifically caused by how Google Drive and Google Workspace handle interactions with external users. It's likely not something Meraki could fix unless they can see my account as some sort of guest in their own Workspace. I don't know much about how that works since we don't use Google for our email provider. I imagine this is a very niche problem, but I'll add what I found out and my best assumptions below. Q1: Why did the bounce-back say my Gmail account was disabled? A: Early last year, I received a Google Drive document from a vendor using a Google environment. I never created an account to access the document but I did receive a One-Time-Passcode to open the file inside of Google Drive. Near as I can tell, me accessing that document auto-created a Google account using my work email even though I didn't go through any setup process. I have not accessed that file since the day I received it, thus I have not even opened Google Drive for probably over a year. I imagine Google auto-suspends accounts like these after a period of no usage. Q2: Why did the bounce-back happen when sending to Meraki support's email address but not others? A: Google processes emails to Workspace Group accounts and individual accounts differently. If a Gmail account is disabled (my auto-created account), it cannot send to group accounts. My assumption is support@meraki.com is one of those Workspace Group accounts. My organization deals with individuals so this is probably the first time anyone here has sent an email to a Google Group account. Q3: How did it get fixed? A: I had to log in to the Google account tied to my organization email. That's it. Before I even logged in, it said my account was disabled. I was then emailed a One-Time-Passcode to sign in and it forced me to create a password and setup a Google account. The account I created doesn't appear to be set up like a typical account. It does not have Gmail capabilities by default, certain settings are turned off, etc. Overall, this was an easy fix once I realized what happened. I now know more about Google Workspace environments than I ever wished. Google auto-creating an account like that then suspending it is a bit frustrating though. Especially when the person doesn't realize their Microsoft work email even has a Google account! Thanks to everybody who gave suggestions!
... View more
Feb 13 2024
6:50 AM
Thanks for all the replies, it was well past the end of day for me when I posted this and we hadn't had any reports like this from our organization. I just figured I'd post here just in case others were having problems. I'll give them a call today, like suggested, to see what's going on and post an update.
... View more
Feb 12 2024
3:05 PM
I opened a support ticket with Meraki about an issue we had. They responded quickly but when I tried to reply via email, I got a bounce-back from mailer-daemon@googlemail.com that said support@meraki.com couldn't be found, or is unable to receive mail. Then at the bottom it says MY email account is disabled. This is quite confusing since we do not use Google for our mail provider. When I tried a message trace, it appeared my email sent correctly. I have not received any other reports like this from other staff in my office either who respond to gmail account daily. I attached a picture of the email body from the bounce-back. Is Meraki having email trouble right now? I can see that they use salesforce for ticketing, so maybe it's something related to that? Or maybe the recent DMARC requirements Google is enforcing? Just wanted to put this out there to see if other people have had issues. I wasn't sure if my email response was truly received and I ended up commenting on the ticket through the "My cases" web page.
... View more
Dec 21 2023
10:07 AM
1 Kudo
Thanks, looks like they deployed a fix and are monitoring it. Documentation is working for me now, at least. @CShepp
... View more
Dec 21 2023
8:17 AM
1 Kudo
I was just about to ask about this. Not sure how to report something like that. Firefox and chromium based browsers get the same thing. I assumes it's related to the subdomain.
... View more
Oct 4 2023
6:54 AM
@BYoungIM this is 100% correct. I'd like to add that you will need to create the user/group tag first then assign it to your preferred user/group. Without the tag being assigned to anybody, nobody will get the settings.
... View more
Aug 25 2023
10:07 AM
Apologies, my last comment wasn't clear. I meant copying the contents from your original ps1 file to a new one, THEN adding it as a new script in SM - not modifying the just source in your picture. As far as I know we can't create scripts in SM yet (good feature suggestion though). That being said, if it works from Intune, there might be something else going on. You could try creating a simple echo script and that will upload. If not, then this is something I would ask Meraki Support about.
... View more
Aug 25 2023
8:03 AM
1 Kudo
I've been able to get ps1 files to work with success. You may want to start fresh. Make a new script in SM, copy the contents of your current ps1 into a new file with a new name, try to upload new file. And you've probably already done this but be sure the script runs locally on a machine before running it from SM. Good luck!
... View more
Aug 11 2023
9:12 AM
It sounds like your configuration profile might be misconfigured or something else might be broken before getting to that point. If you've changed any part of your enrollment process in the last week, a new configuration profile would need to be created to reflect that. Changing MDM servers, expired certificates, and network/user authentication changes are some things that come to mind.
... View more
Jun 27 2023
9:33 AM
1 Kudo
Though I don't have experience specifically with this happening after license expiration, I have had to deal with orphaned MDM devices which I would assume would occur once the Systems Manager license expires. Assuming that's what would occur: 1. Will the settings remain on the smartphones that he has already setup? Answer: Yes. To remove the settings, you will need to either unenroll them first via Systems Manager, unenroll them on each device (if you allowed to be removed from the device), or erase each device AFTER the license has expired. 2. will the installed apps remain on smartphones? Answer: Yes, unless it is an app set to remove with MDM and you or the client were able to remove the MDM profile from the device. 3. Is there anything that he has to take care of that may happen if licenses are not renewed? Answer: No, if you unenroll the devices BEFORE the expiration period. Otherwise, they will need to remove the MDM profile on each device or erase it. If I were you, I would start unenrolling them a couple of weeks before the expiration to give enough time to take care of any devices that may be turned off/lost network. If they are tied to something like Apple Business Manager, remove those as well. And if I were your client, I would erase the devices anyways.
... View more
Oct 7 2022
9:00 AM
Glad to hear you got it working. It's hard to say what specifically allowed the .msi to run without digging far into this. But, it sounds like the install switches weren't recognized so the .msi failed to run until Meraki recognized a valid switch (/l for logging). Whether this is Meraki's or the .msi file's doing is difficult to say. I'll be sure to try this out if I run into this same problem though.
... View more
Oct 5 2022
7:44 AM
1 Kudo
A quick test you can do is to install the msi via PowerShell using the same installation arguments you have in SM. You'll get more information this way if it does fail and can troubleshoot from there. If it doesn't fail, then you can add a log switch in the installation arguments using /l*v "C:\Log\File\Path.log". If you can see download logs on the computer, I would think you would be able to create a log file too. Hope this helps.
... View more
Sep 30 2022
7:01 AM
1 Kudo
If you have the settings @ekramer configured then you should be able to do it from the device list. If you click the checkbox for the devices you want, there's a drop-down list called "Command" and you can choose "Send notification" from there.
... View more
Aug 11 2022
11:11 AM
That's a bit of a shame considering how large Windows is in Enterprise environments. That being said, This is a good enough answer for me. I was hoping for some other answers but this seems to be a tough topic. There are definitely some tricks I've picked up over the years that can get us fully (or at least nearly) automated. It'll probably involve some clever scripting. Considering this is such a lightly touched on topic, I might make a public page somewhere with my experiences to help other people in the same boat. Thanks!
... View more
Aug 5 2022
12:40 PM
Is there any MDM documentation specifically for Windows devices? We use iOS, macOS, and Windows at my workplace but run Windows on more than 90% of the machines. Most of the documentation I have found seems to tack Windows information at the bottom of the page. The information is lean compared to something like iOS profile and software deployment and feels a bit like an afterthought. Windows devices feel a bit neglected. Even posting this, there are labels for iOS, macOS, Android, and even Chrome OS but not one for Windows. I have a good amount of experience in SCCM and JamfPro from my previous job that has helped me along but I feel like I'm missing something when it comes to finding documentation. Does anybody have good documentation for deploying to Windows? Best practices? Are people using alternatives to Systems Manager for Windows provisioning?
... View more
Labels:
- Labels:
-
Other
Aug 5 2022
11:00 AM
1 Kudo
You can view SM agent log files on Windows client machines at C:\Windows\temp\m_agent_service.log, m_agent_service.log.1, etc. You may also find logs specific to the software you tried to install in the same directory. There are also potential event errors that might occur. If you open Event Viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin. Meraki has some documentation for these here near the bottom of the page. Frankly, when this happened to me neither of those provided enough information to narrow down the cause. Redeploying or reinstalling at the client device did end up fixing it for me and I am still digging into why.
... View more
This occurs at my workplace when we have somebody come in with a laptop and they plug it into a dock with a network cable. The computer will be associated to two clients - wireless and wired - and they will have the same name. The current way I filter these when searching for multiple clients is to just sort by Online/Offline status. It doesn't seem like the best way to do that though so if there's other suggestions, I would be willing to listen.
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 6743 | Feb 20 2024 12:15 PM | |
| 1521 | Jun 27 2023 9:33 AM | |
| 2163 | Oct 5 2022 7:44 AM | |
| 1441 | Sep 30 2022 7:01 AM | |
| 1372 | Aug 5 2022 11:00 AM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 4 | 6743 | |
| 2 | 1484 | |
| 1 | 1915 | |
| 1 | 1972 | |
| 1 | 4009 |
© 2024 Cisco Systems, Inc.
