Hi there,       So I've recently been testing where the point of issue is for deployments. I've tested across 5 MacBook some are T2 and some are M1 devices.       Main issue during automated deployment I'm seeing is the phase where m_agent gets installed and whether or not it gets its permissions. Behaviour from this deploying is that m_agent is erratic and does not take commands from Meraki portal CLI which also means it will fail installs except for profiles which only require APNS to be working, those update fine.       I often test before deploying apps if a simple ls command works by sending it from Meraki. If I get a correct response, I know m_agent is currently working and the custom app/vpp app deployment should work correctly.       Some of the behaviour I've see with regards to m_agent is:   - Even though it gets its permissions from "Meraki Settings For X" it behaves roughly 80% of the time intermittently. Meaning that sometimes it doesn't respond to the ls command other times it does. This is done in testing in ideal environment where I'm keeping the device awake. It just behaves erratically regardless of the machine.    - Even if ls command works, quite literally 10 seconds later the command will not work anymore assuming m_agent is again not communicating correctly or working. Thereafter randomly it will work again. And this behaviour is present for the entire deployment process and for however long the device is using on Meraki. https://photos.app.goo.gl/dTMWFfNbLdwvYKZx6  You can see in the screenshot above that in the same breath where m_agent is working and communicating correctly and installing apps, it will just stop and the installs queued will fail. This behaviour is more frequent on M1 MacBooks in comparison to T2 MacBooks.   Important point to note is that we've also observed completely automated deployment of what we would consider good deployment. Where all the profiles deploy as it should as well as all the apps without error but this is the exception.   Even in ideal testing environments with a reliable network the m_agent will stop communicating and app installs will fail. Almost as if it times out. Comes back again 5 minutes later. This behaviour is present across all 200 of our devices.    Question then would be: 1. What PPPC permissions do we need to give m_agent present in Library/Application Support/Meraki/m_agent with the assumption that the PPPC profile is not doing what it should. 2. Even though "Meraki Settings for X" profile is deployed, would it be more reliable if we manually gave the privacy permissions to m__agent ... View more

Hi there,    I'd like to confirm if permissions have to be set manually on devices that have automatically rolled out Meraki agent through "Meraki Agent Settings for X"? Or does the profile automate the granting of permissions for m_agent as well? ... View more

Hi there,   I've noticed a disconcerting trend on the historic devices onboarded with Meraki. We see the below on a large portion of our devices with no way to specifically single them out to deal with the issue.   I'm not sure if there's a relationship but out of the 110/170 MacBook devices we have, they do not seem to be fully communicating properly with Meraki.   One example is you could push an app install and they do not respond. It will sit in pending state indefinitely.    Or for example changing company-wide Meraki agent minimum version, only about 60 out of the 170 devices actually does the update, and this we waited about a month to see through.   Does this mean we have to go back to re-enroll 110 devices manually?   ... View more

Hi there, I'd like to know if it is at all possible to exclude iOS devices from compliance checks of security policies meant for MacOS devices? For example, one of the security policies does mandatory app list check for "Google Chrome" But that same app is not mandatory for our iOS devices. How would be get around to excluding this? ... View more

Hi there, I've recently been testing device enrollment and deployment process on Meraki MDM. Some things I've noticed that affects the repeatability of deployments or breaks in the process and flow of deployments: 1. When the MacBook's screen is locked custom apps do not deploy and take forever to retry deployment, same goes for profiles. 2. 2/5 of the profile settings are installed most of the time, this may be because of the m_agent prerequisite for them (this is anecdotal) 3. Systems Manager agent along with other profiles all seem to have enormous install periods/delays. Seems like when an install is queued nothing else can happen in tandem between the agent the Meraki management serve everything else will just be queued. 4. If "X" install fails or automated task by tag, the retry attempt is much too long after failure. Considering internet speed and that the MacBook is freshly install I think the above bottleneck is related to Meraki comms with the MacBook.  My question is, are these known issues and are there any workarounds to make deployments more reliable? ... View more