https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450119#M13526 <P>Hello,</P><P>our client has iOS devices which are connected to DEP program and School Manager, and also to Meraki SM. Most of the ipads are already connected to DEP program when they are purchased from vendor, so these can be installed "out-of-box" and this works nicely.</P><P>However, some of the devices are connected to DEP program with Apple Configurator 2 manual enrollment since they are purchased from "DEP incompatible" vendors. After running these devices through AC, they appear to School Manager and show under "Apple Configurator devices" and can be moved under Meraki MDM like the vendor DEP'd devices. This all seems to be quite straight forward and well documented.</P><P>After the ipad reboots, it gets the settings from MDM server excactly the same way as vendor DEP'd devices and it seems to be OK. Even Apps and settings are applied correctly. The only problem with Apple Configurator enrolled device is that the remote management can be removed from this device. The device shows a message in lock screen. "This device is connected to remote management. If you want to remove it, click here". And if you click it, it will go to the settings and allow the remote management to be removed. Any thoughts?</P> Wed, 03 Mar 2021 13:49:34 GMT Tapas1 2021-03-03T13:49:34Z https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450119#M13526 <P>Hello,</P><P>our client has iOS devices which are connected to DEP program and School Manager, and also to Meraki SM. Most of the ipads are already connected to DEP program when they are purchased from vendor, so these can be installed "out-of-box" and this works nicely.</P><P>However, some of the devices are connected to DEP program with Apple Configurator 2 manual enrollment since they are purchased from "DEP incompatible" vendors. After running these devices through AC, they appear to School Manager and show under "Apple Configurator devices" and can be moved under Meraki MDM like the vendor DEP'd devices. This all seems to be quite straight forward and well documented.</P><P>After the ipad reboots, it gets the settings from MDM server excactly the same way as vendor DEP'd devices and it seems to be OK. Even Apps and settings are applied correctly. The only problem with Apple Configurator enrolled device is that the remote management can be removed from this device. The device shows a message in lock screen. "This device is connected to remote management. If you want to remove it, click here". And if you click it, it will go to the settings and allow the remote management to be removed. Any thoughts?</P> Wed, 03 Mar 2021 13:49:34 GMT https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450119#M13526 Tapas1 2021-03-03T13:49:34Z https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450120#M13527 <P><A href="https://community.meraki.com/t5/user/viewprofilepage/user-id/57011">@Tapas1</A> This is perfectly normal what you are seeing, after the devices have been enrolled for 30 days this message should dissapear. </P><P>" <SPAN>If you’ve acquired devices from sources other than Apple or participating Apple Authorized Resellers or carriers, they can also be added to Apple Business Manager using Apple Configurator 2. Manually enrolled devices you set up behave like any other enrolled device, with mandatory supervision and MDM enrollment. However, the user has a 30-day provisional period to remove the device from enrollment, supervision, and MDM. " </SPAN></P><P><SPAN>Source Apple - <A href="https://www.apple.com/business/docs/site/Apple_Business_Manager_Getting_Started_Guide.pdf" target="_blank" rel="noopener nofollow noreferrer">https://www.apple.com/business/docs/site/Apple_Business_Manager_Getting_Started_Guide.pdf</A></SPAN></P> Wed, 03 Mar 2021 18:57:35 GMT https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450120#M13527 BlakeRichardson 2021-03-03T18:57:35Z https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450121#M13528 <P><A href="https://community.meraki.com/t5/user/viewprofilepage/user-id/1941">@BlakeRichardson</A> Thank you very much for your reply! I have totally overlooked this 30-day provisional period.</P> Thu, 04 Mar 2021 07:08:28 GMT https://community.cisco.com/t5/endpoint-security/problem-with-devices-enrolled-to-dep-mdm-with-apple-configurator/m-p/5450121#M13528 Tapas1 2021-03-04T07:08:28Z