KevinMigliaccio's Posts

We have the same issue and use all iOS devices, the only way i have found to turn them off is to select them in the console and under more actions is to push a shutdown. This is really only useful while configuring devices before deploying them.

I had same issue with a user that had so many duplicates they had over 64,000 contacts in the native contacts app. how i was able to rectify it for my user was to first verify in boxer all contacts are there correctly one time each, then on the device  turn off back up of contacts for icloud and turn off backup of boxer for icloud.  delete the boxer app from device. then log into the users icloud account and go to contacts where you can right click and select all. then delete them.  return to device and go to contacts and verify they are all gone from device.  reinstall boxer via push or download from your corporate app catalog.  you can then verify that all the contacts are there correctly. NOTE: i did not enable caller id or local contacts in boxer again and told the user they can do what they want but i suggested not activating these features until we are sure problem won't repeat.

It sounds like some of the apps are authorized at the user level  instead of  at the OG , we have all of our shared device go to a default OG = to the one the user will log in using and have all our apps mirrored for both OGs that way it never pulls them,  however when I personally log in to a shared device using the same OG a user would  several apps are added since my test account is listed under additions in many smart groups. 

We have all our shared devices  change OG when signed in, to one that will add a profile which puts the device in single app mode and make that app Hub.  the devices must be DEP or Supervised by Apple config but it works great.

We are finding that error ourselves but due to our usecase  it presents in a very problematic way.  Our shared devices when checked in and kiosk ipads are Locked to single app mode for extended periods and since they are Wi-Fi only they dont communicate with the time sync servers for some reason which causes a time sync error randomly we see this incongunction with the HMAC error when we can get into the logs... When the single app is something like WEB etc... a iOS upgrade will cause the time to sync and device to return to normal, however if the single app is Inteligent HUB the device wont receive any commands to come out of single app mode and had to be connected to a MAC to restore device. Is anyone else noticing the time sync issue in conjuction with this error and are the devices Wi-Fi only or cellular?

as a solution we pushed content locker out to all devices and listed directions for all app setups in the content locker. by doing this every user has setup instructions pre loaded for each app configuration including screen shots.

we do use multiple DEP profiles primarily to assign devices to specific OG's when signed in ( not in use),  it allows us to create a basic Staging user where the email address is the manager responsible for that subset of devices. we do not use ground control, we looked at it and found it offered very little  benefit for us. The passcode has always been removed from Apple devices for us and is readily apparent because we have a compliance policy that notifies immediately when its removed via email to user and notification on screen.

We have used the multi user devices  quite extensively.. a few things to consider... We make a Default staging OG based on the department the device will be deployed this way you can see who manages any subset of devices. We found that when devices were checked in  and all became lumped into one OG we had a hard time managing them especially for compliance issues, by breaking them into subgroups we can have better accountability when the device is not assigned to a user.   We also found that you can streamline the workflow of installing and removing applications by having the core apps that don't change in the default staging OG then when it moves to user OG the apps are already there. the only apps we don't install at the default OG are mail so that it clears the settings in between users.  The one major headache we have encountered is being in healthcare we require passcodes on all devices...Our setup has devices in the default staging OG install single app mode airwatch agent profile so the device is alway secure, however Apple forces the passcode to be removed each time a user logs out of a shared device, we initially had users enter a default code upon sign out so the device remains compliant but that has become increasingly impossible due to the speed which the device locks and the compliance message cant be accessed. We resolved this by excluding shared devices from the passcode compliance when logged out.  The other issue we experienced is since we have a compliance policy that checks device last seen running every 5 minutes devices will not come out of single app mode and allow access to the device until the check is complete this means each time a user signs out the device it could take up to 5 minutes.  We currently have almost 300 shared devices over multiple campuses and OG's, and have worked through a lot of these little caveats.  I hope some of this helps.

wE LIKE YOU HAVE BEEN USING tOKENS for enrollment and things worked great when we first had Airwatch... however somewhere around version 9.4 DEP enrollment failed with errors etc... What we found after working with Support was that they ' fixed'  DEP to follow the registered devices rule for enrollments.  Everytime we enroll a new DEP device now we have to go to console/groups and settings/all settings/devices and users/ general/enrollment turn off require registration token  and save. device will enroll then turn token back on making sure to check expiration time because it doesn't save it after a short period. I hope this helps. We love DEP just wish they gave us option to enforce the token rule on DEP devices or not.

i assume this is random devices and not system wide. We run into that problem often and have found that either the device has a compliance issue or has gotten out of sync with the app and profile, our resolution has been to ensure device is compliant, remove tunnel app and VPN profile push the ap back out and push the vpn out.  user must then open tunnel app to accept and acknowledge the privacy screens and such, the user then open the configured app without issue.

I don't remember seeing an email for a seed script to fix android, our android devices still show old app names and icons.. What is the name of the script I'll search it, that way at least some of our devices will show correctly. 

The problem continues with the rebranding as well... any apps that received the new apps Web and Hub etc... yet in the catalog they maintain the old names and logo's  Talk about poor user experience.