Apple School Manager / DEP <> Meraki. Alternative recommended MDMs and cost?

[primarypete]

Hi

 

Bit of an open ended question this:

 

1: Is it possible to setup IPads without needing an Apple ID to be put in manually into each client afterwards? My understanding is that they are not needed if you have managed Apple IDs. I have set up everything in DEP and then Apple School Manager to get the right data into Meraki, which I have imported and set up but there is basically no support guidance and from what I can see with other MDMs, you get asked about shared IPad environments as options in the initial DEP deployment, but not in Meraki.

 

Should I be able to setup IPads without the clients needing to enter Apple IDs in DEP without School Manager & Classroom App or should that only work in Classroom? In which case does anyone have a step by step guide for getting it working including the intial deployment steps. There is not much out there! I've looked at the official Classroom App and followed that (trying with 'pretend data' I've manually put in as well as importing from Apple School Manager and both times I can't get Classroom ap to do anything other than say it isn't configured correctly.

 

HELP!

 

Does anyone recommend other MDMs if I can't get this working in Meraki? I've heard good things abut Zulu Desk but want to keep cost to a minimum.

[Blue_Cookeh]

Do you actually need to use the Classroom app? From what I gather its only if you want to split user data up into "profiles" and is only supported on the newer iPads with 32GB or more of storage.

 

Otherwise you should use DEP, Meraki MDM, and Supervision with Apple Configurator on a Mac to set the iPads up. This will allow you to assign apps to devices rather than Apple IDs, which means hoorah! no Apple IDs necessary

[primarypete]

Hi Thanks for the reply - Classroom is ideal but not essential right now but do want to have everything set up correctly to be able to use it later without having to re-set everything up as I am having to do now due to a problem with the apple certificate (don't ask).

 

I'm ideally trying to move away from Configurator and have everything in the cloud. Is it possible to assign to devices without Configurator or not? I can still have devices with supervision due to DEP.

[fredbayker]

Supervision is either by DEP or configurator. You don't need both.

Configurator was superseded by DEP but configurator is still available as an alternative.

Edited July 22, 2016 by fredbayker

[Stevecee]

Do you actually need to use the Classroom app? From what I gather its only if you want to split user data up into "profiles" and is only supported on the newer iPads with 32GB or more of storage.

 

Otherwise you should use DEP, Meraki MDM, and Supervision with Apple Configurator on a Mac to set the iPads up. This will allow you to assign apps to devices rather than Apple IDs, which means hoorah! no Apple IDs necessary

 

Classroom app is needed for shared ipads which need 32GB, however the features that give you control over the classes ipads still work on the 16GB ipad 4s i have at school!

[Brimstone]

Classroom app is needed for shared ipads which need 32GB, however the features that give you control over the classes ipads still work on the 16GB ipad 4s i have at school!

 

For Clarification....

 

To use the assign, password reset and log out functions in the Classroom app, you need have an iPad configured via your MDM as shared iPad which requires either iPad Pro 32GB, iPad Air 64GB (there is no 32GB version) or iPad Mini 4 64GB (no 32GB Version)

 

In order to run any other functions in Apple Classroom only requires a 3rd Gen iPad or above.

 

You need to ensure your MDM is linked via certs with Apple School Manager, that's token download and paste from VPP and certs exchanged between MDM and ASM (Apple School Manager)

 

Managed Apple iD's created using ASM are NOT for use to deploy apps and books to iPads, they are only used for Shared iPad and iTunes U. You can deploy apps via device assignment from your MDM.

 

The blog link should point you in the right direction for support

 

https://meraki.cisco.com/blog/tag/apple/

[primarypete]

Thanks for the replies guys. Think I am closer to getting there. I have managed to set everything up in Meraki by Device but Meraki is STILL asking for an Apple ID to install the apps (I've currently stuck in the same ID in multiple IPads as I used to).

 

Is this because we are running the free version of Meraki?

[sparkeh]

Thanks for the replies guys. Think I am closer to getting there. I have managed to set everything up in Meraki by Device but Meraki is STILL asking for an Apple ID to install the apps (I've currently stuck in the same ID in multiple IPads as I used to).

 

Is this because we are running the free version of Meraki?

No I use the free Meraki and apps are installed without an Apple ID. How are you deploying the apps?

Edited July 23, 2016 by sparkeh

[primarypete]

I've got the devices 'in' via DEP.

 

I've then bought apps through VPP and they are in the VPP page.

 

I've then added the apps on the APPS page.

 

In CLIENTS I've got tags like 'Loris' or 'Kakapo' which are classes in our school. I have the same tags in the APPS page on individual apps.

 

I have nothing in owners at all. No devices are assigned owners. I have 'Use VPP Device License' ticked on every app we have. There are currently no users defined in VPP>User Management.

 

Screens below. Appreciate the help:

 

DEP:

 

VPP:

 

APPS:

 

INDIVIDUAL APP EXAMPLE:

[primarypete]

I've figured it out!

 

Basically I have had to go through every single app and recreate it / push it again and then fiddle with stuff until on the vpp page the 'devices assigned' populates without any of the user assigned stuff that was how it had been previously set up.

 

So that''s hurdle number 1 sorted. Hurdle number 2 is very much still a brick wall (getting Classroom app to get passed 'you need to configure an education configuration profle'. I HAVE! grrr.

[Brimstone]

You also need to set up classes in Meraki, have a look at this vdeo..

 

[primarypete]

Hi

 

Yeah I have done groups 2 different ways in Meraki but neither work as I still get the config error when opening the Classroom App.

 

I've tried importing through ASM & I've also tried setting up a small test group manually.

 

I only have the app installed on the teacher ipad (IPad Pro).

 

The same edu profile is pushed to all devices.

 

The student ipads are ipad 1's but I was going to set them up 1:1 style so they should be fine and fit in the required spec.

 

I've even tried switching teacher / student ipads around but it makes no difference.

 

 

Any ideas?!

[Brimstone]

Hi

 

Yeah I have done groups 2 different ways in Meraki but neither work as I still get the config error when opening the Classroom App.

 

I've tried importing through ASM & I've also tried setting up a small test group manually.

 

I only have the app installed on the teacher ipad (IPad Pro).

 

The same edu profile is pushed to all devices.

 

The student ipads are ipad 1's but I was going to set them up 1:1 style so they should be fine and fit in the required spec.

 

I've even tried switching teacher / student ipads around but it makes no difference.

 

 

Any ideas?!

 

 

If the student iPads are the 1st Gen then you are out of luck, Apple Classroom only supports iPad 3rd Gen or above...

[primarypete]

Sorry that was a typo - was supposed to say the student IPads are IPad AIR 1's.

[boogster]

Hi Guys

 

I am setting up similar and I can see 32 devices in ASM that say unassigned and when I click on assign to server and click done nothing happens? any ideas please.

 

UPDATE

Been on the phone to Apple and apparently an issue using MS Edge Browser. I tried in chrome and after selecting assign to server it then gave me an extra box to select my MDM.

 

Thanks

Edited July 28, 2016 by boogster

[Brimstone]

Have you created your MDM in ASM?

 

Have you uploaded and downloaded certs between MDM and ASM to create secure links?

[boogster]

Yep all sorted now as per previous post. It was an issue with ASM and MS edge not displaying additional option.

Tbaks

[boogster]

On another note. Is it possible to prevent pupils from deleting apps and adding pass codes etc within meraki? If so where is this and can't find it. Thanks

[smidsy]

You can prevent the adding of pass codes within the Systems Manager -> Settings section. Select the profile that affects the settings on your iPads. Select the Restrictions setting on the left of screen and expand the iOS restrictions (supervised) setting. Within their is the following setting: Allow modification of passcode settings (iOS 9+). Make sure that this is unticked. Also within that section is a setting called Allow app removal right at the top of the list.

 

Hope that helps.

[boogster]

thanks smidsy that's a great help. The school have asked me for an app to replicate the ipad onto PC so it can show up on the IWB. Is there any app you can recommend (free or paid). that's works well.

[thebyronic]

I've figured it out!

 

Basically I have had to go through every single app and recreate it / push it again and then fiddle with stuff until on the vpp page the 'devices assigned' populates without any of the user assigned stuff that was how it had been previously set up.

 

So that''s hurdle number 1 sorted. Hurdle number 2 is very much still a brick wall (getting Classroom app to get passed 'you need to configure an education configuration profle'. I HAVE! grrr.

 

Another thing that caught me out is that the iPads need to be iOS 9 or later and you can't be on the Meraki legacy license to be able to use device app assignment and not apple id assingment. I couldn't understand why it kept asking for the Apple ID and password -_-

 

And yes I had to do the same thing. 'Purchase' the apps in VPP, add it in the app section of Meraki, sort my tags out for the apps, then go back into the apps page, click on the app and simply hit save changes (without actually doing anything).

 

The classroom app isn't being used by us here at the moment. We haven't the right devices for it. How annoying...

[thebyronic]

thanks smidsy that's a great help. The school have asked me for an app to replicate the ipad onto PC so it can show up on the IWB. Is there any app you can recommend (free or paid). that's works well.

 

We use AirServer. Paid, but quite good. You can get a trial license if you want to give it a go. :-)

[smidsy]

+1 for Air Server, I have used a copy of it here on a few occasions and not encountered any problems.

[Jehanzeb]

For Clarification....

Managed Apple iD's created using ASM are NOT for use to deploy apps and books to iPads, they are only used for Shared iPad and iTunes U. You can deploy apps via device assignment from your MDM.

 

That's exactly what was confusing me earlier but your comment (above) clarifies my query. Having managed Apple IDs seem a fantastic idea especially when a School can manage, reset passwords and deactivate and or delete Apple IDs however bearing in mind deactivating and deleting IDs do not delete the Apple ID from Apple Servers i.e. we cannot create the same (deleted) ID again nor we can delete an ID without deactivating it first.

 

For me the biggest disappointment is the inability to deploy apps while using Managed IDs. Schools that are on legacy MDMs have to rely on creating bulk Apple IDs so that they can deploy apps onto devices. Meraki for instance does not support Device based assignment (on legacy system - but it does on the "free" offering system).

 

Kindest regards

 

J.

[AlanD]

+1 for Air Server, I have used a copy of it here on a few occasions and not encountered any problems.

 

Yes. I like the optional Airserver Connect App - which allows you to connect via a QR code displayed on the PC running Airserver. Avoids having to use Avahi (Or wireless management) to repeat all the bonjour broadcasts between VLANs (assuming you segregate your wireless traffic from domain traffic....of course you do). We use smoothwall to route airserver connection back to desktops - and only allow it for "staff" AD groups.

 

Only wish you could do the same for AirPrint...and that the connection made would disappear automatically after use....so that you don't print to the previous printer after you go somewhere else. Yes - I know there are printer apps which use QR code and you can "Send documents" to the APP which then prints them but that is not quite so intuitive...and again once a printer has been selected it stays there. In fact with some printer apps there is no way of removing the printer from the list....other than resetting the ipad...

 

Bluetooth and/or NFR are promising for the future...but our printers don't support these.