[ipad] Meraki MDM & Permissions not working

[ITGURU]

Hi

I have been playing with the free Meraki MDM functionality and seems to work great.

 

However, one issue - the user can go into settings, profile, and remove the profile - it prompts them for the own personal Pin code.

 

However, within the profile settings next to removal settings, I have it set to 'require password to move this profile' and a different password to the users password.

 

Can someone tell me why it is allowing the profile to be uninstalled with the users password, rather than the password I have configured.

 

Thanks.

[Bigbird7]

Hi,

 

I assume that you are talking iOS devices? If that's the case unfortunately the only way to prevent removal of the Meraki profile is for your devices to be registered with the Apple DEP (Device Enrolment Programme). If you purchased through an Apple reseller they will usually help you out with this and it is possible to add previously purchased devices into DEP.

 

At my school we've distributed around 1500 iPads to staff and students in the days before DEP and I can only think of a couple of occasions where the profile had been deliberately removed. I guess we've been lucky! If you make the wifi settings a Meraki profile it would make the device useless in school anyway if it was removed. Meraki can be set to email you as soon as a profile is removed.

 

Cheers

[ITGURU]

Hi,

 

I assume that you are talking iOS devices? If that's the case unfortunately the only way to prevent removal of the Meraki profile is for your devices to be registered with the Apple DEP (Device Enrolment Programme). If you purchased through an Apple reseller they will usually help you out with this and it is possible to add previously purchased devices into DEP.

 

At my school we've distributed around 1500 iPads to staff and students in the days before DEP and I can only think of a couple of occasions where the profile had been deliberately removed. I guess we've been lucky! If you make the wifi settings a Meraki profile it would make the device useless in school anyway if it was removed. Meraki can be set to email you as soon as a profile is removed.

 

Cheers

 

Thanks for this useful information - I'll have to look into DEP.

You don't know off hand where the setting is to email in the event of profile removal do you? Be something that's helpful in the mean time.

Thanks.

[Bigbird7]

Thanks for this useful information - I'll have to look into DEP.

You don't know off hand where the setting is to email in the event of profile removal do you? Be something that's helpful in the mean time.

Thanks.

 

Yep it's under System Manager/Configure/Alerts

[Guest WMITTech]

I'm having problems where students can remove Meraki profiles even though I've set s password?

[ITGURU]

Yep it's under System Manager/Configure/Alerts

 

It appears to be enabled by default, but if I remove the profile I don't get a notification. However if I go into the device itself - it does show in there that the profile has been removed.

 

Any ideas?

 

Thanks.