Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 3676 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMC 6.1 - Minimal User Interaction with DEP

BenjaminWest

I have Apple DEP configured to dump new devices into SMC.  When a device is turned on by the end user, it goes through the enrollment process and installs the SMC client.  The issue I am having is that none of the tasks in the compliance policy fire until the user opens the SMC app on the iPhone.  Is there a way to make it so the user doesn't have to open the app?  My tasks are configuring Wifi, Password policies, Exchange Active Sync, and installing a few apps via VPP.  All of the settings app installs seem to come down once the user opens the app.  Ideally they wouldn't have to though.  Any ideas would be greatly appreciated.



This thread was automatically locked due to age.
  • 0

    hi, i apologize as this inst an answer to your question but a question of my own, have you managed to get the DEP enrollment process to work with the "assign user to device" enabled in your Apple DEP profiles? i have the enrollment process working but when i enable "assign user to device" this i get the following message " the configuration for your iphone could not be downloaded from the "ORG" Invalid profile, if i disable this it works as expected/

    also did you figure out how to apply your config?

     

    thanks in advance.

  • +1

    Hi Benjamin,

    at the moment iOS does not allow that an app process is automatically started.
    To provide full functionality it is necessary to start the SMC app once so it successfully synchronizes.
    If that is not done features like locate or sending messages would not work and the user wouldn't know it.

    Alternatively, you could of course remote the SMC client from the enrollment process and install and activate it afterwards.

    Regarding the assign user issue: please make sure the latest SMC patch 6.1.12 is installed. Otherwise, enrollment might fail if the user does not exist in the SMC server yet.

    Best regards
    Stefan

Unfiltered HTML