[ipad] Meraki MDM

[IAMCloud_Curt]

Hi all,

 

A quick question regarding Meraki's Device Management, I've setup the profile and deployed it to a test iPad, also I can now deploy apps via VPP - was just wondering if we can disable Settings tab via Meraki?

 

Because at the moment, kids can easily go into Settings and then remove the Meraki managed profile, can't seem to find any options in Meraki system manager and they we're unable to assist me when I submitted a ticket, but I am sure someone on here has figured a way to stop them removing profiles.

 

Thanks in advance guys!

[Arreks]

If only life was that simple.

[PR-UK]

Can't be done I'm afraid, nothing will restrict the settings.app and there's no way to stop them removing the MDM profiles (you can stop them removing Apple Configurator profiles though). You can configure alerts so when a device becomes unenrolled you'll get an email to notify you. Not perfect...

[localzuk]

You can stop MDM profiles being removed, but only if the devices have been enrolled in DEP also (all our iPads are restricted this way here). You can't restrict the Settings app though.

[IAMCloud_Curt]

You can stop MDM profiles being removed, but only if the devices have been enrolled in DEP also (all our iPads are restricted this way here). You can't restrict the Settings app though.

I'm currently sorting this out with our reseller, he needed all our serial numbers and our DEP ID, just wondered if there was something to do in Meraki settings.

 

I read that if you enroll them via deploy.apple.com they won't be able to remove the profiles!

[localzuk]

I'm currently sorting this out with our reseller, he needed all our serial numbers and our DEP ID, just wondered if there was something to do in Meraki settings.

 

I read that if you enroll them via deploy.apple.com they won't be able to remove the profiles!

 

Indeed. Once you have them on the DEP programme, you set the profile up in Meraki via the DEP section, and there's a box about profile removal there. Beauty of it is, even if they wipe the iPad, as soon as it gets turned on, it automatically gets all the profiles and settings again.

[pirran]

DEP - yes LocalzUK, it's wonderful when it works, we've around 120 devices registered with DEP and sitting with Meraki MDM it's a lovely solution.

Unfortunately Apple haven't figured out (or just don't care) how to manage certain devices yet even if purchased in the past through a registered supplier. For example, AT Computers went bust and some of the kit they provided us (iPad 2) historically can now not be added to DEP as it's the supplier that has to carry out this action. Do Apple want to know about the problem, to be blunt, no. :\

 

That said, DEP and Meraki MDM is truly wonderful from a management perspective.

[Matthewj]

Just following up on Pirran's comment,

 

You cant' really blame Apple on this. Apple have given the right to suppliers to be able to backdate DEP devices by 4 years. It's not really Apples fault if they went bust. Just make sure when you buy Apple products get them from big companies eg. XMA / Sotormfront. For DEP to of only been in the UK for a year Apple allowing resellers to backdate and apply DEP to devices from 4 years prior is better then most can ask for. I to have a school that bought 30 iPad's from a third party that is to small to be a DEP company so I have to use apple configurator 2 at that site. These things happen.

 

Matt

[Brimstone]

DEP - yes LocalzUK, it's wonderful when it works, we've around 120 devices registered with DEP and sitting with Meraki MDM it's a lovely solution.

Unfortunately Apple haven't figured out (or just don't care) how to manage certain devices yet even if purchased in the past through a registered supplier. For example, AT Computers went bust and some of the kit they provided us (iPad 2) historically can now not be added to DEP as it's the supplier that has to carry out this action. Do Apple want to know about the problem, to be blunt, no. :\

 

That said, DEP and Meraki MDM is truly wonderful from a management perspective.

 

Having had the same DEP situation happen with a customer that bought iPads from AT and spoken direct to Apple I can inform you that AT were told to submit their lists of customers to Apple with a deadline at which after they would no longer allow any further DEP enrolments for their customers. So this was down to them rather than Apple.

[snagrat]

We have had devices bought through AT registered in DEP for us by Toucan/Goldfinch