MDM that works with DEP?? (May 22, 2014)

HCCSC John H's picture

HCCSC John H

Joined: Aug 21, 2015
WWW
Your rating: None (1 vote)

Anybody's MDM working in the real world with DEP to deploy units yet? Ours has not released their DEP version as of yet (May 22 2014) nor have I seen a real world demo of this method actually working. Getting a tad nervous as our summer IOS reloading plans and being set soon and yet to see this method actually work and what the ins and outs are of using this loading method on Student IOS devices. Shock

Top
jsutz4244's picture

jsutz4244

Joined: May 23, 2014
WWW

Casper MDM and Apple DEP

Your rating: None

I recently registered with the Apple DEP, new VPP, and new Apple ID for students. Have just begun testing and it is working well. We particularly like the no-touch configuration and the ability to Supervise our devices OTA. I did a wipe of some test devices, pre-enrolled them in our mdm, including installing configuration profiles. Supervision held when the devices were restored. I highly recommend JAMF software Casper Suite. We have been managing our macs and 500+ iPads (1:1 and cart-based) in our k-8 school. The new enrollment process is working great with the Casper MDM. The sign-up and verification with Apple takes a couple of days, but our Apple rep helped expedite the process. The web interface for DEP is easy to use. Assigning devices was very easy by simply entering the Apple order number in our Education Account.

Top
HCCSC John H's picture

HCCSC John H

Joined: Oct 23, 2013
WWW

Thanks for the feedback

Your rating: None

I appreciate the feedback. I have contacted our Apple SE and he is going to be doing a live demo of both DEP and the new VPP Distribution model fairly close by on June 10 so I will go see that. At this point (May 31st 2014) our MDM provider still has no DEP solution available, but hopefully soon. Good to know that this process is working. Thanks again!

John Humphrey
Apple Support Specialist
Huntington County Community Schools
Huntington IN

Top
960Design's picture

960Design

Joined: Aug 5, 2014

DEP & Meraki

Your rating: None
HCCSC John H wrote:

Anybody's MDM working in the real world with DEP to deploy units yet? Ours has not released their DEP version as of yet (May 22 2014) nor have I seen a real world demo of this method actually working. Getting a tad nervous as our summer IOS reloading plans and being set soon and yet to see this method actually work and what the ins and outs are of using this loading method on Student IOS devices. Shock

I've been using DEP for nearly a year on Meraki. I currently have about 2700 iPads DEP connected and adding about 100 a week.

Top
Larawe's picture

Larawe

Joined: Sep 16, 2014

I am awe because of

Your rating: None

I am awe because of perception about therapeutic understudies and exposition administrations accessible RushEssay reviewall sort of understudies who need article and who are understudies of online colleges. Instruction important for every one of you.

Top
7steps's picture

7steps

Joined: Sep 17, 2014

Supervision for non-DEP devices

Your rating: None

I am not able to Supervise non-DEP devices meaning devices that were not purchase from Apple's DEP program. Is it even possible to supervise non-DEP devices using Profile Manager w/ OS X Server?

BL

Top
HCCSC John H's picture

HCCSC John H

Joined: Oct 23, 2013
WWW

I believe you can still use

Your rating: None

I believe you can still use Apple Configurator to Supervise those units..

John Humphrey
Apple Support Specialist
Huntington County Community Schools
Huntington IN

Top
960Design's picture

960Design

Joined: Aug 5, 2014

Yep

Your rating: None

We have the occasional grant / gifted 10 pack of iPads purchased through a separate vendor. You cannot 'lock' the supervisory profile on the device, is the only thing. We created a website link that we navigate to once the device is setup or have the BYOD user navigate to. They(we) download the supervisory profile, once that is added we can remotely add anything else, including restrictive profiles, licensed apps ( actually requires one more step - email verification, but simple enough ), ect.

Top
7steps's picture

7steps

Joined: Sep 17, 2014

Thanks for the responses. I

Your rating: None

Thanks for the responses. I am now able to set my devices to be Supervised, I am also able to load my MDM profiles as well with Configurator so that the device registers with my Apple Profile Manager. However, I can only password protect the base configurator profile. The rest of the profiles can be easily deleted. Any suggestions?

Appreciate the help!

BL

Top
HCCSC John H's picture

HCCSC John H

Joined: Oct 23, 2013
WWW

When you create the policy in

Your rating: None (1 vote)

When you create the policy in 'General' are you going towards the bottom...Security->'Never'?

John Humphrey
Apple Support Specialist
Huntington County Community Schools
Huntington IN

Top
7steps's picture

7steps

Joined: Sep 17, 2014

Hi John, Yes, I have the

Your rating: None

Hi John,

Yes, I have the security at NEVER. So the base profile of Configurator is protected. It's the other profiles from Profile Manager that can be deleted. I tried download the profiles from Profile Manager and added to Configurator and enrolled online to install the profiles but both attempts does not secure the profile. I can still delete them. How might I secure these profiles?

Thanks.

BL

BL

Top
960Design's picture

960Design

Joined: Aug 5, 2014

Locked Supervisory Profile

Your rating: None (1 vote)
7steps wrote:

Thanks for the responses. I am now able to set my devices to be Supervised, I am also able to load my MDM profiles as well with Configurator so that the device registers with my Apple Profile Manager. However, I can only password protect the base configurator profile. The rest of the profiles can be easily deleted. Any suggestions?

Appreciate the help!

Apple only allows Supervisor Profiles from MDMs to be locked to the device under one circumstance. The device was purchased directly from Apple using a business/school account. It's through this business / school account that the handshake with Apple and the MDM is guaranteed. That is why I can pre-supervise every device before they even arrive.

I get a shipping notification from Apple and use the Sales# to register the devices at https://deploy.apple.com. Then I open up my MDM ( Meraki ) and go to MDM > DEP page. The devices that are registered but not Assigned to a settings group filter to the top. I check the first box without a yellow or green cloud and then shift-click the last box to Assign settings to the device.

Under Assign Settings I have chosen to Allow Pairing = No, Supervise = Yes, Mandatory = Yes, Removable = No and told the iPad to skip a few startup screens: Location Services, Restore From Backup, Terms and Conditions, Siri, Diagnostics.

This forces the now linked device to install our supervisory profile and makes it unremovable.

Does that make sense?

Top
7steps's picture

7steps

Joined: Sep 17, 2014

It's making sense

Your rating: None

Yes, it's making sense. My next batch of ipads purchase will go through our business account so I can do what you described. I am new at this so I am trying to figure out how to best deploy the first batch of ipads that are not part of DEP. Here's my current setup:

1. I use Configurator to load the base profile which loads 2 profiles on the ipad. One which can't be remove but second profile which is auto generated by Configurator can be deleted.

2. I then enroll the device to my MDM which install a trust profile and a remote management profile, both can be deleted.

3. I can then push apps and books.

Is there a better way?

BL

Top

Who is online?

There are currently 0 admins, 0 users and 27 guests online. Connected users: .

Recent Activity