IBM Security MaaS360

 View Only
  • 1.  Kiosk mode dropping off

    Posted Tue June 15, 2021 01:17 PM
    Hi,
    Got an odd situation, hoping someone can give me a pointer.
    I have a customer with a few different policies pre-Enterprise.
    Going in tomorrow to demo a Samsung A12 (A20e replacement) in Kiosk mode.
    Have enrolled A12 in DO and setup COSU policy for kiosk.
    After about 5 minutes the policy is removed automatically and the handset drops into a default Kiosk policy setup for the older handsets.
    The handset says Maas has removed the launcher and the only thing I can make a connection with, is that in the portal, MaaS says (under Actions & Events tab) that Dynamic Group Assignment has occurred.
    This seems to be at the same time the kiosk drops off.
    What is it?
     


    ------------------------------
    Bryn Abbott
    ------------------------------


  • 2.  RE: Kiosk mode dropping off

    Posted Tue June 15, 2021 01:49 PM
    OK so, I'm beginning to think this to do with Policy precedence but it's never been an issue for me before.
    In the Groups section I have this handset under Enterprise devices and have applied the new kiosk to it, but MaaS keeps forcing a Dynamic Group Assignment and knocking the device back to the wrong policy.
    I'm wary of changing policy precedence because 1) I don't know that much about it and 2) I don't want it to adversely affect the 300 devices already out in the field.
    Is there a way to stop this Dynamic Group Assignment?

    ------------------------------
    Bryn Abbott
    ------------------------------



  • 3.  RE: Kiosk mode dropping off

    Posted Wed June 16, 2021 05:31 AM
    Edited by Eamonn O'Mahony Wed June 16, 2021 05:32 AM
    Hi Bryn
    Although it might seem counter-productive, your test and specific-usage policies need to be set higher in the Precedence list. 
    To prove this if you verify your device in the inventory, go into the device and from Summary top-left, go to History, you will probably see that the policy has been set. 
    Where testing policies are used (presumably for small numbers of devices) these should be at the 'top of the tree'. 
    After this you should have your specific use-case policies, followed  by your group-assigned policies. 
    If a device is assigned to a group, but you have followed the previous 2 pointers, this should fix it. 
    Please remember not to set the higher-precedence policies (non-group) to default or you will have a world of pain happen with most devices!
    Finally, if you want to be sure this won't have an impact on devices in an unexpected way, you need to make a list of all policies and device groups and document your precedence before you actually execute on it. 
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 4.  RE: Kiosk mode dropping off

    Posted Wed June 16, 2021 07:04 AM
    Thanks Eamonn,
    OK so, let's say my live kiosk policy is at the top of the the list and my test kiosk 2nd in the list, simply putting the test kiosk to the top of the order should work?
    It is this live kiosk that the test device reverts to each time.
    With regard to the grouping, I have not deliberately added the test device to any group but it is being auto assigned.
    I will follow your advice and document the order before making any changes.

    ------------------------------
    Bryn Abbott
    ------------------------------



  • 5.  RE: Kiosk mode dropping off

    Posted Wed June 16, 2021 07:10 AM
    Hi Michael
    Mitch has added some interesting points. In addition - I forgot to say - policies assigned to groups generally take precedence over policies assigned to individual devices so this is another consideration. Not easy!

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 6.  RE: Kiosk mode dropping off

    IBM Champion
    Posted Wed June 16, 2021 06:49 AM

    If you have dynamically assigned a policy to a User Group or Device group everything will revert to that policy.  Since the customer has been using Device Manager rather than AE this may be the issue. 

     

    Thanks,

     

    Mitch Lauer

    connecTel  Wireless  

               

    159 Perry Highway, Suite 200

    Pittsburgh, PA 15229

    216-970-6981 | Cell

    412-339-5775 | Help Desk

    412-339-5765 | Direct Dial

     






  • 7.  RE: Kiosk mode dropping off

    Posted Wed June 16, 2021 07:10 AM
    Thanks Mitch,
    I hadn't dynamiacally assigned a policy to a group but I did notice that policies were assigned under the Groups tab.
    I notticed also that the test device had been added in a group called Enterprise devices, again I think MaaS was doing it's smart associations here and so assigned my test policy to this group (Is this classed as dynamic?) but, the end result was the same. The test policy goes onto the device and after a few minutes it is removed, dropping back to the live kiosk policy.


    ------------------------------
    Bryn Abbott
    ------------------------------



  • 8.  RE: Kiosk mode dropping off

    IBM Champion
    Posted Wed June 16, 2021 07:15 AM

    I have encountered this issue as well in the past.  I simply remove any assignment of policies to groups.  When enrolling I will just choose the appropriate policy and this seems to do the trick.

     

    Thanks,

     

    Mitch Lauer

    connecTel  Wireless  

               

    159 Perry Highway, Suite 200

    Pittsburgh, PA 15229

    216-970-6981 | Cell

    412-339-5775 | Help Desk

    412-339-5765 | Direct Dial

     






  • 9.  RE: Kiosk mode dropping off

    Posted Mon June 28, 2021 09:41 AM
    Hi Mitch,

    Can I ask how you remove the policy assignment on a group please?

    I can see the customer has applied kiosk2 to the group 'All Devices'

    I can't seem to find an option to not apply a policy to the all devices group
    other than delete the group?

    Thanks in advance.

    ------------------------------
    Bryn Abbott
    ------------------------------