Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 3677 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMC 6.1 - Minimal User Interaction with DEP

BenjaminWest

I have Apple DEP configured to dump new devices into SMC.  When a device is turned on by the end user, it goes through the enrollment process and installs the SMC client.  The issue I am having is that none of the tasks in the compliance policy fire until the user opens the SMC app on the iPhone.  Is there a way to make it so the user doesn't have to open the app?  My tasks are configuring Wifi, Password policies, Exchange Active Sync, and installing a few apps via VPP.  All of the settings app installs seem to come down once the user opens the app.  Ideally they wouldn't have to though.  Any ideas would be greatly appreciated.



This thread was automatically locked due to age.
Parents
  • +1

    Hi Benjamin,

    at the moment iOS does not allow that an app process is automatically started.
    To provide full functionality it is necessary to start the SMC app once so it successfully synchronizes.
    If that is not done features like locate or sending messages would not work and the user wouldn't know it.

    Alternatively, you could of course remote the SMC client from the enrollment process and install and activate it afterwards.

    Regarding the assign user issue: please make sure the latest SMC patch 6.1.12 is installed. Otherwise, enrollment might fail if the user does not exist in the SMC server yet.

    Best regards
    Stefan

Reply
  • +1

    Hi Benjamin,

    at the moment iOS does not allow that an app process is automatically started.
    To provide full functionality it is necessary to start the SMC app once so it successfully synchronizes.
    If that is not done features like locate or sending messages would not work and the user wouldn't know it.

    Alternatively, you could of course remote the SMC client from the enrollment process and install and activate it afterwards.

    Regarding the assign user issue: please make sure the latest SMC patch 6.1.12 is installed. Otherwise, enrollment might fail if the user does not exist in the SMC server yet.

    Best regards
    Stefan

Children
No Data
Unfiltered HTML