![]() In the past it appears the method around this was to set a self removing profile, but as it gets absorbed by AC2.5 this doesn't seem to remove on its own. The problem was generated through the manual enrolment DEP AC2.5 process as the profile we created in AC2.5 which has a specific user assigned to it to connect wifi, would also then get absorbed by the mdm profile, preventing it from being removed at a later date, and as a result not being the correct wifi user on the device. The reason for this method is, it individualises the connectivity on the wireless land controller, so we can locate devices easier, but it also passes authentication against our proxy as our proxy will assign proxy access based on wifi user auth. We use wifi authentication via profiles assigned through jamf pro, which will assign their wifi against their username and password, using a wildcard and a generic password for all students. and finally came up with a solution, which I thought I would share here as it may come in helpful for some. I've been working through my bugs with this process. Or it simply isn't available in some countries yet. Presumably, this could be a time setting issue as enable location services on the device is no longer a prompt in IOS 11 it appears. Here is a list of domains an Ipad hit upon attempting to process DEP (non apple config 2 enrolment method)Īnd because my firewall wont work on domain names and only IP's this could be an ongoing battle, as I cant just work with wildcards or just approve 17.0.0.0/8 which we have done in the past.įrustratingly, I tried doing the Apple config 2 enrolment method off of my phone internet, but it still wouldn't proceed past the error: MCCloudConfigErrorDomain – 0x80EF (33007) Pymble Ladies College - Technical Support OfficerĪt first glance, the underlying issue is that apple have moved some of their DEP enrolment servers that are resolving to *. domains to 23.0.0.0/8 range which is akamaitechnologiesĪs I found our firewall has been struggling with IOS 11 with DEP My 2 cents of experience.ĮDIT: If only there was an option to add MacBook/iMacs to the DEP servers. a student account, it gets assigned to the iPad record in Jamf along with Department, Job Position, Building info etc, which triggers all the Apps and configuration profiles that has been scoped to the Department/Smart Group. ![]() My PreStage enrolment has user authentication to an Active Directory, so when an AD account is used, e.g. > This step was to remove any supervision profiles that was performed during the prepare stages, the idea is to see "Activating iPad" message - and if you performed step 3 to 5 correctly, you should see "Looking for configuration/Downloading Configuration" and then "Remote Management" screen showing up - this means DEP is working and applied. > Performed another restore onto the iPads and then setup the freshly restored iPad without the Apple Configurator just as you would setup a DEP iPad. > Click edit and assign the iPads that has the modified date: "added less than a minute ago" > Click on the existing PreStage enrolment or create a new PreStage enrolment In Jamf Pro, go to Mobile Devices and then PreStage Enrolment > Below, chose the option 'Assign to server' dropdown, and then on the right my institution Jamf Pro MDM server > Put the formatted serial numbers from the text editor in previous step and put them in the Serial Number textbox. > Open the CSV file, copy the Serial Numbers (first column, row 2 onwards) and use a text editor to format the serial numbers in comma versions, e.g. > Click on the blue 'download' link next to the device type and quantity added which downloads a csv file. > Keep an eye on the number of devices added on the "Devices added by Apple Configurator", if it changed from 0, the above action has added the devices into DEP server. In ASM, go to MDM Server -> Devices added by Apple Configurator 2 > When it asked for the Apple ID to add to DEP, I chose the account that has the 'Device Manager' or 'Administrator' role in Apple School Manager (ASM). > Configured the remaining steps relating to supervision and iOS steps (i selected: don't show any). > Created a DEP Wifi profile that uses the MacBook Pro Internet Sharing SSID > unticked the automate enrolment (I like to setup from the iPad for a true OTA config). > Ticked the Option "Add to Device Enrolment Program" Updated/Restored iPads to iOS 11 - a prerequisite action for adding to DEP. Hope this might help those willing to go this route, or improve my steps further. Just wanted to share my experience as I was playing with adding existing iPads to DEP.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |