Mike Walker

Thanks! And I have to say that DDM ROCKS! 👍 Finally we can get the OS updates out in a much more timely fashion!

OK, I like what I see about DDM being able to force the OS updates more emphatically (especially with the release of 18.4 and its 60+ critical security patches!). But the docs are a little fuzzy about how to go about managing that. They seem to imply that I make a new Profile containing The Software Update Enforcement payload and apply it to the smart groups I want (basically our entire org) OK, but what happens next month, when it's time for another update? Do I delete this profile and make a new one? ... or can I just update this profile to the new iOS version, and re-publish it? What's the best practice for this... The previous security patch iOS update came out about three weeks ago, and to date we still only have 80% of the active fleet updated. I pushed the 18.4 out yesterday morning, and overnight we have ONE out of 140+ devices actually updated. It's been slow going out there!

Freestyle is something I haven't touched as it doesn't strike me as anything 'intuitive' on first glance. What's the best primer out there for understanding its capabilities?

Ah!! your post beat me to it by one moment. Our difficulty is that factory reset would WIPE the data we are trying to back up via USB... 😞

Actually I have that DEP 'Device Pairing" setting enabled now, but if I am understanding correctly; the DEP profile only gets applied on the initial device enrollment - so changes here will not affect devices that are already enrolled?? At any rate I am still getting "pairing is prohibited by a policy on the device" after SYNC and reboot of my test device. Still a mystery!! I have a ticket open with Omnissa support now..

Ah-HAH! Thanks very much for that tip!! The ADE profile is unknown to me... where do I find that, to be able to edit out the USB restriction there? v .... PS: I think I found it, in Groups & Settings > All Settings > Devices & Users > Apple - Device Enrollment Program. ... there is an "Edit Profile" icon there 🙂

Our "iOS Standard" assignment group that activates "Standard restrictions" profile has the "Temporary Restrictions Override" group (Which activates our "Temporary restrictions Bypass" Profile) included in its "Exemptions" list. So if I understand this correctly , a user in the "Temporary Restrictions Override" group has the standard restrictions profile NOT applied - and the temporary restrictions profile applied instead. This seems to work fine for other functions, just not the USB pairing, which seems to be disabled by something else

My question today is about "How to enable USB Pairing". we have a 'temporary restrictions bypass' profile we are testing to get the USB connection block overridden! (we want to use the "iMazing" backup app which requires connecting the iPhone to a computer via USB for offloading backups) restrictions Profile - configured as we understand it should be: Device Functionality: Allow USB drive access ENABLED iCloud : Allow Backup ENABLED Security & Privacy: Allow USB 'Restricted Mode' DISABLED, Allow pairing with non-Configurator hosts ENABLED. I have also tried it with the USB restricted mode enabled(should prompt for passcode then) but it still doesnt pair. The iPhone setting to Allow Accessories is ON. we are not able to pair to any Mac or Windows machine (the USB connection is made and we can see there is a drive there, but "pairing is prohibited by a policy on the device"). Latest 18.3.1 iOS on our test iPhone. Anyone know how to make this work? Thanks In Advance!

So, what was the problem , and how did you resolve it? Might be helpful for one of us in the future...

Just a follow up - current status is that folders cannot exist unless there is at least one app already assigned ON THE PAGE. Once you have one (or several) apps assigned to the page, a folder can be created there, and it will appear after the spec'd apps. All remaining (unassigned) apps will cascade after the folder in alphabetical order. If the folder contains only apps that are not assigned to a particular user, then that user will not see the folder (it will be hidden for them). In the previous incarnation folders could be spec'd without any app assigned to the page, and thus our old profile was killed as soon as we tried to edit what was in the existing folder...

Thanks for the link!! Broadcom support is having issues activating my account entitlements (promised "in 24 hrs" back on Thursday last week)... today they are seeing it still stuck on Pending - they have made a new ticket to get my account set up to submit Support Tickets and now promise resolution in "24-72 hours". So only then I will get to file the actual support ticket on the UEM bug that currently has 150 iPhones displaying the wrong home screen app locations...

We had UEM updates a couple of weeks ago. Recently I went to remove an app from a folder (on our iPhone fleet we have two folders on page 1) and on publishing the profile, both folders were GONE, all the apps were just scattered across the pages. Recreating folders in the profile (or a new copy of the profile, or indeed a new freshly made profile) results in the same problem; on publish, the "Dock" settings are still there, but Page switch is OFF and pages/folders are gone. Anyone seen this before? I'm trying to find the right link to file a support ticket on this....

That's a very useful article, thanks! I'd love to see more posts like that, specifically anything to do with "gotchas" in the IOS profile configuration sections (like "Home Screen Layout profile settings" for example - docs I currently have on that are a little vague about Page & Folder, and what happens with installed Apps when you don't specifically assign any to a page. Do all pages have to have apps specified or if we set 3 pages will they dynamically fill - Previously we only spec'd the apps to go into folders and now folders don't seem to work at all...)

This looks really nice, very happy to see this resource online! 👍