Mosyle

[Olliedawg]

For those of you who use Mosyle as your MDM - is there any way to stop students from being able to change WiFi settings such as Auto Join, Data saving mode & setting manual DNS? I have it locked down fairly well & most things they are not able to change.

 

There seems to be a student who has twigged on & is setting the DNS server to 1.1.1.1 or 8.8.8.8 on a couple of the shared iPads.. This in effect does nothing and prevents internet access, as the iPad use a captive portal via Sophos XG - but causes issues for the next person who picks the iPad up & I end up being called over to set the DNS back to automatic.. just a PITA!

 

I've scanned through the restrictions & I can't see anything else that I can toggle/turn on to prevent this

[midweek]

I don't use Mosyle much but there has always been a big disparity between what you can do with a supervised device and one that has been enrolled by a user. Is this a BYOD type scenario where the pupils enroll their own devices into Mosyle?

[Olliedawg]

I don't use Mosyle much but there has always been a big disparity between what you can do with a supervised device and one that has been enrolled by a user. Is this a BYOD type scenario where the pupils enroll their own devices into Mosyle?

 

All of our iPads are school owned, enrolled/supervised devices. We don't have many iPads (15) & they are all setup as shared devices in a trolley, which students can just pick up and use for web browsing & a couple of apps. Internet access is blocked unless a user signs into the captive portal.

 

I have got them locked down fairly well, apart from these few WiFi settings. I can't see anything i'm missing on the restrictions profile - unfortunately we are on the free version of Mosyle so have no official support from them.

[bknaggs]

I don't think it's a restriction that Apple offer so I don't think any of the MDMs will do it. I'll check Jamf in the morning and see if it is an option in there.

[Olliedawg]

I don't think it's a restriction that Apple offer so I don't think any of the MDMs will do it. I'll check Jamf in the morning and see if it is an option in there.

 

I think you may be right. I can’t find anything on the old Google search. Scanned through all the Mosyle settings multiple times

[pooley]

Thank you for reaching out to Mosyle Support.

 

At this time, the MDM does not have the ability to remotely manage Low Data Mode. This is not a limitation of Mosyle, but of Apple’s MDM Protocols. If this were to change in the future we will be sure to implement this into our platform.

If you are referring to blocking users from modifying changes from the device DNS settings located on Settings > Wifi > select Wifi > click the Wifi > "Configure DNS" section, you could try using the DNS Settings profile on a test device.

 

This profile can be used to lock the DNS settings you apply on supervised devices with the option "Prohibit Disablement (Supervised Only)". However this would require entering DNS settings information on the profile.

 

Feel free to refer to our Help Center article for more information.

 

 

** reply I had from Mosyle support **

[Olliedawg]

Thank you for reaching out to Mosyle Support.

 

At this time, the MDM does not have the ability to remotely manage Low Data Mode. This is not a limitation of Mosyle, but of Apple’s MDM Protocols. If this were to change in the future we will be sure to implement this into our platform.

If you are referring to blocking users from modifying changes from the device DNS settings located on Settings > Wifi > select Wifi > click the Wifi > "Configure DNS" section, you could try using the DNS Settings profile on a test device.

 

This profile can be used to lock the DNS settings you apply on supervised devices with the option "Prohibit Disablement (Supervised Only)". However this would require entering DNS settings information on the profile.

 

Feel free to refer to our Help Center article for more information.

 

 

** reply I had from Mosyle support **

 

Thank you very much! I'll take a look tomorrow

[LeMarchand]

At this time, the MDM does not have the ability to remotely manage Low Data Mode. This is not a limitation of Mosyle, but of Apple’s MDM Protocols. If this were to change in the future we will be sure to implement this into our platform.

 

That's annoying as I found a few of ours had had this enabled for some reason.

[pooley]

That's annoying as I found a few of ours had had this enabled for some reason.

 

It's the first thing to look at when apps don't push or update. Kids are annoying!