Suggestions
Have a great idea that you’d like to see added to our service? Perhaps there’s an existing feature that you’d like to have extended or modified? Share it here!
420 results found
-
Display lastSeen on the device page
Right now it's only shown on the device list page but not on the page for a specific device.
Additionally, it would be nice to put the true timestamp in the alt field so that you can see the exact time on hover.1 votePlease find under “Enrollment” section of the device details screen.
-
add the option to push Wifi Profiles as Device Profile
This would be great for non-user-enrolled MDM Deployments.
Generally speaking it would be great if all payloads that work as Device Profile would have a Checkbox to do so (and maybe even default to the device channel)
6 votes -
Google Account at Device Group Level
It would be great to define a Google account on a device group level.
3 votes -
Prestage Enrollment with DEP
Please add the ability to set custom attributes for DEP Devices which have not yet enrolled with SimpleMDM.
This would enable us to set some user attributes (email addresses, user names etc.) before handing the device to the user. Right now we are not able to preset a Google account profile for a user for a full zero touch deployment.
117 votes -
Include DEP status in API
Please include a device's DEP status (whether or not it was enrolled through DEP) in the information returned in the API.
2 votesDEP status can now be found under the key “is_dep_enrollment”.
-
Setup a role option to only have access to view/rotate FV PRK
We have techs that need to access the FV PRK for troubleshooting purposes and also rotate the key if they view/use it. The current Role options are too broad and give access to other features that the techs shouldn't have access to.
I'd like to see a user Role option to allow only the rotation of a FV PRK and not the the rest of
Push assigned apps and updates. Wipe, lock, remove passcode, locate, and message devices. Enable and disable lost mode for devices.Checking the box for that Role option gives me the rotation option but I don't…3 votesThis is now possible with the "Allow secret information visibility" options for User Roles.
-
9 votes
This option can now be set under Apps > VPP > Settings.
-
Add authentication to enrollment
In evaluating other MDM services, I've found that enrollment that requires some kind of end-user authentication automatically satisfies the User Approval portion of MDM enrollment when initiated using DEP.
This is, of course, in addition to the security concerns of anybody with a DEP-included serial being able to enroll without authentication.
1 voteSimpleMDM currently supports LDAP authentication during DEP enrollment. Starting with iOS 13 and macOS 10.15, SAML authentication is also supported during DEP enrollment.
-
I would like to see the dock support more apps on the home screen layout profile
what about allowing the dock to support more apps on the layout profile, right now it's limited to only like 4. an ipad can support way more
2 votes -
Allow Download of Custom Profiles
It would be great to have the option of downloading previously uploaded mobileconfig files (or even better, edit them in the webinterface).
Normally i prototype profiles in Profile Manager, but since i cannot put every bit of information that is contained in the Profile into it's name, i have no possibility of checking what exactly i am deploying.
A download Option would make troubleshooting/debugging Custom Profiles a lot easier!
Thanks in advance.
10 votes -
Unique DEP local admin password (per device)
It would be great if the password of the local administrator account created during the DEP enrolment was unique to that device.
The password could be shown in the device information together with the EFI password and FileVault recovery key.
37 votesThe options to store auto-created admin passwords and to automatically set (and store) a unique password per device has been added to the macOS Account Setup options. Stored passwords can be retrieved from the device record. Link to KB article: https://help.pdq.com/hc/en-us/articles/5626064805659-macOS-Account-Setup-and-Admin-Passwords
-
1 vote
-
update software on an individual device via the API
As discussed in Slack - there's currently an "update_apps" command in the API - but that only applies to device groups. I'd like to be able to update software on an individual device via the API.
i.e. to push a test device to the latest and greatest, but leaving other devices on the standard version...
There's a button to do this in the GUI, so I'm hoping adding that to the API shouldn't be too bad?
4 votes -
Scope payload availability by machine criteria (OS, hardware, etc.)
I propose adding the ability to specify MDM Payload access to devices based on facts of the device. For instance, there is a bug in 10.13.4 that doesn't respect a KEXT profile that was installed prior to 10.13. Having the ability to say only 10.13 machines can get the KEXT payload would fix this issue.
0 votes -
Add setting for a profiles level in the web UI
Currently profiles like password and screensaver settings are set by SimpleMDM as user-level profiles in macos. With MDM that means only 1 user will have that profile enforced. However, your organization might be obligated to enforce that policy for all users organization wide. It is common for a Mac in a corporate fleet to have at least 2 users. If MDM makes it so user-level profiles are only pushed to 1 of the users, you're not in compliance.
If it's possible for a profile to be device-level, we should be able to set it as such in the web interface.…
1 voteThe "For macOS devices, deploy as a device profile instead of a user profile." option now exists on all profiles in the UI that support both user and device channel installations.
-
Add built-in support for Enforced Software Update Delay for macOS and iOS
Added in macOS 10.13.4 and iOS 11.3. Would be nice to have built in:
enforcedSoftwareUpdateDelay
Supervised only. This restriction allows the admin to set how many days a software update on the device will be delayed. With this restriction in place, the user will not see a software update until the specified number of days after the software update release date.
The max is 90 days and the default value is 30.
Availability: Available in iOS 11.3 and later and macOS 10.13.4 and later.
Mentioned https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html and ofc here https://simplemdm.com/2018/01/25/apple-ios-11-3-macos-10-13-4-mdm-features/.
Thanks
1 voteThis feature is currently available under the Restrictions configuration profile in the Apps & OS section.
-
Add a "comment" field to the Kernel Extension policy page
It would be awesome to have a comment field so we could note which app or developer each team ID or bundle ID is for.
6 votes -
Disable iCloud Keychain sync
This is a restriction supported by Apple. But I can not find it in the SimpleMDM restriction configuration.
Also supported by many other MDMs.
0 votesPlease find under the “iCloud” section in Restrictions.
-
report macOS build number as well as macOS version
At the moment Simple reports a macOS major version number - so 10.13.3 - but it was pointed out to me that build numbers can show when intermediate patches have been applied - which would be invaluable in showing devices in need of updates/patching.
So - my machine is currently running 10.13.3(17D47)
Thanks :)
2 votes -
Add scheduling flexibility for iOS Auto Update Policy
As many businesses are limited to which day(s) of the week upgrades can be performed, adding more versatility to the scheduling would be very helpful.
(https://support.simplemdm.com/forums/204404-suggestions/suggestions/31349005-add-the-ability-to-schedule-forced-updates-for-bo)15 votes
- Don't see your idea?