Manuelpl

Meraki does NOT support enrolling AppleTV. Meraki does NOT support VPP push invitations, they only support email Invitations. Now they want to charge! , I'm glad I did not go with them.

That is correct. First you enroll a device to a MDM. Next you create a user in your MDM. Pair up the device with the user. Now invite the user to VPP ( I think in Meraki , you can only send an email invite to VPP ) , the enduser will receive an invitation to participate in VPP. Once those conditions are met , you can now send apps and revoke apps. Note: when sending apps it will appear in their "Previously Purchased" in the App Store , there may be times when the user does not get the app, have them download it from there. When revoking apps a user they will receive a message that the app has been revoked. They will have 30 days to use it, in case they need to move their files etc, and this also gives them 30 days the option to buy it on their own.

Use VPP and this will not happen. When VPP licenses are distributed using an MDM.

With VPP this is possible. You can revoke App licenses at anytime. It doesn't matter if it's there personal Apple ID , or one provided by the school. You can't however revoke Books from iBooks store. - - - Updated - - - This is not true at least here in the states using VPP. Apps can always be revoked.

Basically with a placeholder is a temporary holding place in your mdm for a device, mac ipad appletv etc. What contains in the placeholder is the following. devicename and serial if you manually add 1 at a time. You can also import many devices into a csv with with various information as mentioned at the beginning at this post, most importantly serial and devicename, and now recently discovered airplaypassword for AppleTVs. The only draw back to this is, naming the device with placeholders is only temporary and the name will update to the actual device name when pushing info to it. But it gives you time to sort devices around in case you want to do something like add them to groups. Some reasons to use this is to identify iPads more easily, the generic name is "iPad" if you have hundreds of iPads named the same it's hard to identify them. When you import via CSV it will allow you to create a group from the imported csv. So if you import a cart set, you can add them to a group immediately. I wished placeholders made device naming permanent.

DEP doesn't allow adding the Airplay password.

While importing a placeholder for some iPads I was peeking through profilemanager.log , when I found this gem. [351] [2014/05/22 16:17:21.942] I: Imported placeholder device "MH-Gary Ho_iPad Mini45", SerialNumber=F7NMXXXXXX84, IMEI=, MEID=, UDID=, DeviceID=, AirplayPassword= What I did next was add a new column AirplayPassword= to the placeholder CSV and put a password in. Uploaded the placeholder for an AppleTV and it added the Airplay password to my AppleTV Device in ProfileManager. Just yesterday I added 20 AppleTVs to Profile Manager, I could have saved a few steps.

I have not used Student Apple ID's yet. I also haven't done 1:1 , we are almost there. Manny

Wow I have never seen this.

I think I will just setup a Wireless point , with no security enabled. This will make it easy to get the iPads online.

I remember seeing a setting somewhere , where if the computer is turned of or logged on it would turn off wifi, that might be your problem. Only problem is can't recall where I saw that. I'll look around , maybe it was a CLI command. I'll look around.

From what I've seen it's mostly apps that stream licensed video content.

It seems like once iPads are assigned to your MDM in DEP, you basically can't use apple configurator. I get an error during activation, since it expects you to activate via DEP. And your left with no way of manually adding any profiles , like WiFi. If you have a cart of iPads this means adding each one to the wireless point one at a time. Any thoughts ? Manny

6. It's under the general settings for all your profiles in MDM. You have 3 options. Security Controls when the profile can be removed Always With Authorization Never

4. I think they are not allowed to , because that would turn off find my iPhone , which requires the applied password. But you can always lock location services in restrictions. Again a manual process. 5. No, that's still a manual process. 6. It should be in there. Manny

I would consider a few things. 1. enroll devices using DEP. If you enroll devices with apple configuration , user can delete the mdm profile. Using DEP not only are they not allowed to remove the mdm profile, but if they attempt to wipe or restore to get rid of all your management settings, they are automagically pushed the mdm profile again. That's DEP. 2. Turn on restrictions. Just some added security. 3. Add a backup WiFi access point or two. In case your wireless network goes down, or password is changed on saved WiFi. I put all my iPads a wifi setting of my hotspot and a made up wifi. Just in case. 4. Tracking down iPads using find my iPhone, make sure location services is on. 5. Make sure automatic updates is turned on for apps and iOS updates. 6. In your MDM , Never allow removal of profiles or use via pass code. Manny