Koldov

Shared iPad? /forums/netbooks-pda-phones/225365-ipad-storage-full-when-recording-imovie.html /forums/netbooks-pda-phones/237205-ipad-recording-issue-apple-school-manager-meraki.html

This may be why one of my iPads had a BT SSID (my presumption is that a teacher took one home) and yet I didn't get a Geofencing violation alert... EDIT: Which is also annoying because whenever I've been searching for one, I've looked at the dashboard and said "well, it must be here because it doesn't show it has gone off-site"...

Dammit! Unfortunately, to get the 'location sharing' settings to even appear in the app properties, you have to open the app. When you open the app for the first time (as I realised these were all new iPads that I had to throw in to the mix quickly and hoped the MDM would do it's magic with minimal touch and I hadn't done this) it checks if you have the main 'Location Services' set to ON. Then the app opens and the 'Location' section has an amber question mark. Click on the little arrow and it asks you to enable Once, When Sharing, When Using The App. I chose 'Once' and then went into the app settings in the iPad settings menu and changed it to always... so they have all now reported IP (but of course I have had to open the app)...

I don't think it needs to be open... If 'Settings > Privacy & Security > Location Services' is set to 'ON' (which the 'user' CAN disable )... Then go to 'Settings' and scroll down to the Meraki MDM app and in the 'ALLOW MERAKI MDM TO ACCESS' section choose 'Location', this will give you the options of: Never Ask Next Time Or When I Share While Using The App Always I've chosen 'Always' for those I've got round to so far. Agree on the weakness of the design, maybe an Apple 'Privacy' thing though... but... when you first open the app itself (or after first install), for some reason it doesn't give you the 'Always' option... Also the 'user' can disable this too!

Thanks all... and an update! Well, after a late night and an early morning and all day yesterday, we appear to have mostly 'normal' services resumed... Unfortunately messing with the SSID itself wasn't really an option, it might have been a good fix but with our old WLC it would need to be CLI which I don't have access to (even if I had the know-how) and honestly I thought better than to add more possible issues! It ended up with me plugging in each individual iPad to our Mac-Mini, enabling 'Internet Connection Sharing' pressing 'Trust This Computer' on each one and waiting for the profile to update, then plugging in the next... I did change the SSID case in the profile, I can't tell if that made a difference but they all connected straight away so I left it at that. Now, if you're still with me, this brings me to the issue of the IP showing up in Meraki SM. Some do and some don't, some show SSID, some don't, some show Public IP and some don't (ignore the BT SSID, I don't even know how that got there, probably a teacher took one home)... In our profile now it will only connect to the school SSID set up for the children and you can't turn the Wi-Fi off. After a whole morning wasted trying various things, profile changes, reboots, I've narrowed it down to this: After changing the settings on the iPad for the Meraki SM MDM app to allow it to 'Allow Location Access' to always, the IP popped up in the dashboard. Those without this access enabled do not display their IP (confirmed on multiple iPads), but this seems to go against the information I found on the page for Cisco Meraki (Managing Systems Manager Location Services for iOS): Installing and enabling the Cisco Meraki MDM iOS app provides many additional features for enrolled iOS devices, including more accurate location tracking. While Systems Manager makes every effort to minimize the effect, using GPS location tracking services may result in slightly diminished battery life. If a device user feels as though their battery life is excessively compromised by the SM app, location services may be disabled, while maintaining the other beneficial features of the app (e.g., send notifications, SSID reporting, LAN IP). The underlined section doesn't appear to be the case in my experience... Also: You cannot configure Privacy > Location Services via MDM. This means that end users have the ability to turn on or off GPS tracking. So, now I have to go round and touch all these iPads again! I know it specifically mentions GPS tracking and this isn't what we're talking about here as it's only Wi-Fi, more that the user can turn it off... https://documentation.meraki.com/SM/Monitoring_and_Reporting/Managing_Systems_Manager_Location_Services_for_iOS

Yeah I guess I'll have to resign myself to the fact it's going to be long evening (and an early morning)... I just can't work out WHY they aren't auto-joining... if the setting just forces them on to the SSID I've already provided in the Profile Configuration... On the device it says: Your iPad can only join Wi-Fi networks that are configured by your organization's admin The Wi-Fi power is on and 'greyed out' There's an Edit 'button' so I push that and it shows me the SSID that I want it to connect to... but there's no way to force it to connect... just an info button and a padlock. Pressing the info button shows Auto-Join is on, but guess what... it isn't auto-joining!!!!

Yeah, that's kind of what I thought... but I deployed it through a Meraki SM 'Profile Configuration' > 'Wi-Fi- Settings' > SSID (name) > Auto-Join (ticked) Is that where it is? And that should work? Because that's all done... There's hundreds of them!

Okay so this is a doozy and I can't figure out how to fix it! Whilst trying out different settings to fix a different problem... /forums/internet-related-filtering-firewall/237854-find-device-ip.html I clicked on a setting in Meraki Systems Manager: "Force wifi to allowed networks only" Considering there is a Wi-Fi configuration payload already on all the iPads telling them which network to join (SSID, password, auto-join etc.) I presumed this would be fine... Apparently it turns out it isn't and now all the iPads have jumped off the network and will not re-join... Just to add to the mix Wi-Fi power is forced on and even though it can see the network it should join it just won't... which means any config change I make now (like deselecting 'Force Wi-Fi to allowed networks only') won't even take effect... Where is the 'Allowed Network' configuration then, is it in SM somewhere because I can't find it (although I'll admit I'm probably not looking as calmly as I should)....

As usual, opened up a can of worms... I found the setting on the iPad 'Private Wi-Fi Address' is this the same as MAC Address Randomisation'...? "About private Wi-Fi addresses Starting with iOS 14, iPadOS 14 and watchOS 7, your device will improve privacy by using a different MAC address for each Wi-Fi network. This unique MAC address is your device's private Wi-Fi address, which it will only use for that network" If so, in the Wi-Fi settings in Meraki I have "Disable MAC address randomization (iOS 14 or later)" ticked... But on the iPad Wi-Fi settings it only mentions 'Private Wi-Fi Address'... There is mention of 'whilst joining the network' here: "If enabled, MAC address randomization is turned off while joining this wireless network. A warning will appear in the device's settings indicating that the network has reduced privacy." So I turned off Wi-Fi and turned it back on... nothing changed. So I 'Forgot' the network and waited for auto-join... nothing happened! Definitely shows in 'General > VPN & Device Management > Meraki Systems Manager > More Details > WiFi Settings... both have Auto-join 'Yes' and MAC Randomisation Disabled 'Yes'... So I go to join the network and it asks for a password...? That's not auto-join is it... Anyway, joined manually and... it still has 'Private Wi-Fi Address' enabled!

We use Cisco Meraki, but hardly any of them are displaying the 'LAN IP'... Must be a setting somewhere as there are a few that are showing.

We have a rather legacy system here, but those in this area who had BSF funding to upgrade the network infrastructure should know it well (as I presume all schools had similar networks put in).... Cisco Core & Edge switches, a few VLANS (Curriculum Wi-Fi & Wired, Admin Wi-Fi & Wired, Servers & Printers) and a WLC split into 2 x SSID (Curriculum & Admin). It's always worked OK and although we've had a few changes over the years (re-IP-ing for LGfL, Guest SSID added etc.) it's basically the same. The thing is it was set-up so that the switches do the DHCP and we have DNS on our server... Bearing that in mind, we've had a request from the Governors for details about our filtering (gearing up to get us DfE/KCSIE compliant I guess) so I was going through the reports and found a few concerns... We filter based on IP and each child has a device recorded every time they use it, but I've now found that for some reason iPads don't seem to appear at all in our DNS (I thought it might be a Wi-Fi 'thing' but all the laptops DO appear in our DNS... anyway I thought in that case they might appear in the WLC so I logged in and went to 'Clients' and filtered on the particular SSID the device should have connected to and there are hundreds of devices, but there are no IP addresses only MAC... A little research has uncovered that the Firmware on the Cisco 5508 WLC is at '7.4.150.0' but according to this "If you want a display which shows the client's MAC address, IP address, username, etc (see image below), then the controller firmware version will not support this. The feature was enabled in 8.0.X.X." So, it appears I'm stuck now without a definitive way to find out which iPad has a particular IP address, we have a 'support' contract for the network but it is only break/fix and config is going to cost (no I am not risking downloading and flashing our WLC and APs)... Any other reasonable ideas ? I can see a big change coming...

"The impossible we do immediately, miracles take a little longer"...

So, the LEA music service person was in again yesterday for a singing assembly... still no joy, but what can I do? Everybody was looking at me like I should just be able to magic up some solution, but I do not want to start messing with their laptop! Obviously SLT have no concept of what the issue is, only that it's 'I.T.' and therefore my problem... So I guess I'm going to have to look at getting into the 21st and maybe putting in a straight HDMI run, but as it's a hall projector it's going to be possibly 15+ meters (and means getting the scaffolding out, which can't be done until the next holiday)! EDIT: Update... just walked through the hall and the music service person is there with their laptop happily displaying on the projector... as I walk past I look over at them and they say.... 'it WAS my laptop'....

Also interesting (not really I know it's very dull) Google Maps 'Street View has 'Image Capture: 'DATE' I don't remember seeing that before, but maybe I just wasn't paying attention... Google satellite doesn't have the massive Lidl warehouse... But street view shows it being built in 2021... Bing satellite shows it fully built... And the obligatory 'when it was just fields and no A5 > M1 link (Woodside) road from Bing 'Birdseye'... EDIT: Bing also has a 'Streetside' view which I didn't know about (seems very limited on the amount of roads though)! It says 14/10/2020...

Here's the northern A5 > M1 link before and after in one picture... it used to look all green like the inside of the square, but now looks like the outside with a massive housing development there. At least they got a Domino's pizza... yay for progress!

Here's the A5505 > M1 (Woodside) link road that ploughed through some lovely woods I used to take my son walking through to explore nature when he was little... Before... After... The housing estate went up about 2011 so the images are definitely over 13 years old!

Found an interesting thing whilst searching an area for moving house... If I search for maps in Bing my top search result seems to be Google maps... Anyway, I digress... that's not the interesting thing... I persevered and got on to Bing maps instead, chose the 'Birdseye' view and found they must be using quite old images. Can't quite place it in time if I'm honest, but maybe +10 years? You have to zoom in quite close otherwise it chooses a defined area and the rest is a more up to date satellite view, but this can be quite eye-opening in itself! Below is the M1 junction 11a before it was built, along with the surrounding new housing developments and industrial estates (such a shame, I can really say 'it was all fields round here when I was a lad' and it's completely true)...

Hi, thanks for the offer... I guess I should have updated my post to say I'd found another way to work around it (and it doesn't normally take me 6 months to fix something). I made a few other changes as well in that time, so although the original problem was still valid (wanting Redstor client to backing up other servers and it not being able to communicate with them), I just opted to install the Redstor client on all the individual servers that need backing up instead and they each just back it up directly to the cloud.

It wasn't so much the quality of the compatible cartridges I was concerned with, only whilst researching HP printers in particular I saw this: "It uses dynamic security measures to block cartridges that are using non-HP chips or circuits. Periodic firmware updates will maintain the effectiveness of these measure, and block cartridges that previously worked." Our main printers are all MFDs and are on a managed service, so I don't have to worry about them ever (apart from changing toners and the occasional paper jam). It's just these odd ones that I have to deal with and so the last thing I want is something that's going to give me more issues or to find out it isn't going to take compatible toners somewhere down the line!

Thanks, it will absolutely have to be colour (of course). I don't know about 'aftermarket/compatible' toners in a brand new printer (having said that our print provider has never supplied us with original toner, it's always been compatibles)... however I've also read HP printers especially can be quite fussy about not using original and actively blocks compatibles.

Haha, that's always my first reaction anyway!

Does every type of patch (like the Workstation ones for example) change the version number on the client then, not just major upgrades for Spring/Summer which alter the db too... etc? I guess that makes sense, so you can easily tell which patch has been applied. It does ring a bell though... Not for 'patch testing' maybe but I think I may have done it (quite a few years ago) to catch up a straggler that for some reason wasn't on site and didn't get the original message when doing one of the major ones. I know it should eventually catch up, but sometimes it needs a push (like when they only have a few hours on a training day to get everyone updated and the children are back the next day)... pretty sure I targeted it individually instead of re-deploying it to all.

Actually that's a good shout, unfortunately they were using it to play music and so I couldn't actually do much more than basic troubleshooting (plus it's' not our laptop so I'm limited with what I could do with it anyway). Although I seem to remember they said it had worked OK in another school earlier in the day...

Trust me I've already made the comment about 'getting your steps in' and 'it's always good to get up and walk around for a bit when you're sitting at a desk all day'... I don't think it went down well! Plus we have to be very sensitive about who you say those sort of things too these days don't we... Yeah, I wondered if I really wanted to waste a good beer... Thing is even looking at the cheap -£200 consumer grade ones, then you've got to factor in +£200 for toner!

Hmmmm... in that case any recommendations for cheap/reliable laser for the use case mentioned in OP...?