Choose that and then click on Next.Īt the Enroll in MDM Server screen, here we’re not going to automate the enrollment. Since we’re supervising because DEP isn’t available to us, I’ll assume you want to use Manual in this screen. Once plugged in, right-click on the device.Ĭlick on Prepare… At the contextual menu you can select Automatic or Manual configuration. There are a number of reasons for this, including Activation Lock escrow, but the important thing to know is that any time you change the Supervision state on a device (going from DEP to non-DEP, going from Supervised to non-supervised via Configurator) that you will wipe the device.įirst, plug in a device you’d like to supervise. Before you do anything, know that this process will wipe a device and reactivate the device. To do so, we’ll use Apple Configurator 2. If you purchased iOS devices before DEP was available, then you can still enable supervision on those devices. It’s understandable given the massive consumer market served and the desire to preserve a fantastic user experience on devices. And there are plenty of restrictions and other management options that Apple makes available on a device owned by an organization rather than an individual. Supervision also allows an MDM to escrow a key that can be used to unlock a device locked by Activation Lock. For example, supervised iOS devices that are enrolled in an MDM solution by a DEP portal cannot then be unenrolled. By supervising a device, in Apple wisdom, ownership by the organization is proven and so additional options for limiting what a device can do. All that’s necessary to enroll a device is an active MDM or macOS server running the Profile Manager service.When a DEP device is setup, the device is supervised. This change will let institutions with older or donated hardware receive all the benefits of DEP without having to buy new equipment. Last year, Apple announced that it would start letting educational institutions enroll iOS devices in DEP regardless of where they were purchased. Receive All the Benefits of New EquipmentĪdmins would do well to keep their fingers on the pulse of Apple’s ecosystem, as changes can occur without much fanfare. But Configurator 2’s new system supports greater portability among different Mac hosts. Workflows that run upon connection are now much more involved, requiring proper server certificates and private keys. In its place, Apple added the ability to recreate much of what Configurator 1 did and more through Automator actions and the command line. Apple removed that checkbox in Configurator 2, much to users’ chagrin. Automate Workflows as Much as PossibleĬonfigurator 1 permitted a tremendous amount of automation with a single-preference checkbox, which would run a workflow each time an iOS device was connected. Configurator can also supervise devices manually during the device preparation process, while binding an iPad to a specific organizational identity. DEP or MDM enrollment automatically supervises a device. In addition, admins who want to allow or disallow app functions must have supervised devices. For instance, an admin can dictate which Wi-Fi networks a device can connect to only if the device is supervised. Much of the app’s functionality depends on a device’s supervision state. Supervise Devices to Boost Network Security The most important restriction is Allow Erase All Content and Settings, because erasing a device can break a supervision state when the device isn’t in Apple’s Device Enrollment Program (DEP) or associated with a mobile device management (MDM) system. A single profile can determine settings and restrictions for nearly every aspect of the iOS experience, or admins can create multiple profiles to cover individual aspects. Profiles are integral, and they’re flexible in how they are deployed. The profile (and to an extent, the blueprint) is Configurator’s bread and butter. SIGN UP: Get more news from the EdTech newsletter in your inbox every two weeks! Determine Settings and Restrictions with Profiles Read on to learn how to make your next iPad rollout easier and faster. Although admins can access many of Configurator’s features from server-side solutions, the unique use cases for these tools (and their cost) mean that many users still depend on Configurator. The app has since evolved to accommodate use cases in higher education. Before then, admins had to use iTunes or configure each device manually. Apple Configurator came on the scene in 2012 to simplify the management of iOS devices.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |