New Community user

[WalterDe]

Morning Everyone,

I'm using the Meraki system manager MDM software supporting iPhones, my question is:

Is there a way to block application from begin installed by the users if its not pushed from the MDM?

If i review the software section i see apps that are install and the only way to uning stall them is for the device

to be in my hands.

Thank you in advance

WalterDe

[kYutobi]

If the device had the apps installed before you managed/supervised them you cannot control it unless you have SM enterprise. To also answer the second question yes you can do that by disabling the App store in MDM settings.

Here is an example.

[WalterDe]

I don't see the path to verify that setting,
How did you get to that screen ?

[Haydn1 · Accepted solution]

Systems Manager > Settings > (Click existing profile (Or create a new one)) > Add Settings (If not already added to the profile) > Restrictions

[Haydn1]

The documentation is good if you are new to SM or Meraki in general, give the SM documentation a read here

[WalterDe]

Can i ask another question,

Is there a way to force location services to always stay on ?

Thank you everyone

[SoCalRacer]

https://documentation.meraki.com/SM/Monitoring_and_Reporting/Managing_Systems_Manager_Location_Services_for_iOS

According to that I don't believe so, but I believe you can set a policy that if there is no check in it loses connection or disables connection.

[stevenwhiting]

I don't think there is for iPhones due to the privacy settings recently pushed to them. Which allows a user to block people from tracking them. It's mentioned in the Meraki help

"Forcing GPS Location

Due to Apple end-user privacy restrictions, it is not possible for EMM vendors to force GPS location on iOS devices without user notification, nor is it possible to permanently lock location services to be enabled.

The one exception to this is using 'Lost Mode', which can be found in the MDM commands on the Client Details page. Lost Mode forces location services on, while disabling all other functionality on the device. This can be used as a tool to remediate non-compliant users who are blocking location service requests from Systems Manager."