iPad Management - Block Contacts Meraki MDM

[Bobby_Moore]

Dear all,

 

It would appear our students are starting to create rude contacts on the devices and, as far as I've seen, we are not able to block the contacts app using the Meraki MDM.

 

This post would indicate it is available in other MDM solutions:

https://discussions.apple.com/thread/7161161?start=0&tstart=0

 

I suspect they are sharing them over AirDrop, a provision we would like to leave enabled as it is a good tool if used correctly. They all are using different Apple IDs per device.

 

Any one managing an iPad estate that has found/resolved this issue?

 

Best wishes,

Bobby

[tmoon-mint]

I do this, but via AC2 not Meraki. Dont think the functionality is available in Meraki yet as far as I know it is coming along with support for Apple Classroom.

[InterwebsGuy]

I do this, but via AC2 not Meraki. Dont think the functionality is available in Meraki yet as far as I know it is coming along with support for Apple Classroom.

A Meraki sales rep swore blind to me that this is already available in their MDM product! I sure can't find it, I believe he must be mistaken.

 

You should be able to block apps by creating a restriction profile in AC2 and then uploading that restriction's profile to Meraki and deploy it that way. It's something I keep meaning to do, as I have to block the Cock/Calendar as it's driving me insane. I think the config files might require a bit of editing manually first though before uploading to Meraki.

[InterwebsGuy]

I had a play with this morning - if you save the below as a whatever.mobileconfig file and upload it to Meraki as an Apple Configurator profile it will hide apps.

You will need to replace some of the text in the settings. The last bunch of settings also sets a message on the lock screen - you can probably omit that part of the config file if you like.

 

Use at your own risk, obviously! :-)

 

HasRemovalPasscode

PayloadContent

PayloadDescription

Configures restrictions

PayloadDisplayName

Restrictions

PayloadIdentifier

com.apple.applicationaccess.24100089-515A-4195-B548-DCDD10B1F892

PayloadType

com.apple.applicationaccess

PayloadUUID

4F0EBA5C-319A-4057-8141-D2EB17EDD82A

PayloadVersion

1

 

blacklistedAppBundleIDs

com.apple.podcasts

com.apple.mobiletimer

com.apple.mobilecal

com.apple.tips

com.apple.mobileme.fmf1

com.apple.mobileme.fmip1

com.apple.mobilemail

com.apple.Music

com.apple.MobileAddressBook

com.apple.reminders

IfLostReturnToMessage

ORG NAME

PayloadDescription

Configures ownership information for a shared device

PayloadDisplayName

Shared Device Configuration

PayloadIdentifier

com.apple.shareddeviceconfiguration.FB3D037D-3FAB-446E-BC73-700B83B59C0B

PayloadType

com.apple.shareddeviceconfiguration

PayloadUUID

C43E13AE-A0DE-4AEB-8399-68C79B8EA292

PayloadVersion

1

PayloadDisplayName

CHANGE ME - PROFILE NAME

PayloadIdentifier

CHANGE ME - UUID STYLE STRING - UNIQUE

PayloadOrganization

SCHOOL NAME

PayloadRemovalDisallowed

PayloadType

Configuration

PayloadUUID

AC106F2C-0344-4744-A030-D11E68A4F684

PayloadVersion

1

Edited May 11, 2016 by InterwebsGuy

[Bobby_Moore]

I also found out the reason why I am getting the contacts - it's because of a shared exchange account we added to grant the ability to send work from the devices. Looking into blocking contacts for an individual user in exchange 2010.

 

No settings in meraki to specify which parts to sync when adding a mail account either (unlike when you do it manually)

 

thanks @InterwebsGuy