I have iOS 9.3.1 on an iPad which I am supervising via Apple configurator. It is not DEP enrolled.
I am looking into the what the optimal enrollment flow might be when we need to deploy several hundreds. (If they are not DEP enrolled).
When executing the supervision proces via Apple Configurator 2 then it is activating the iOS devices with the apple ID I am currently logged on with in Configurator. Everything progresses as expected and I end up with a device supervised by my organisation.
However, I am forced to log in with my apple ID AFTER the actual activation. Am I doing something wrong or is the some way of skipping this step?
The purpose of supervising is to avoid no entering the organisation Apple ID several times, which works for activation but iOS still requires me to log in with an apple ID to access iCloud, iTunes, App Store etc.
Has anybody successfully used the new Apple ID U13 Kisok program where parent confirmation e-mails are no longer used to create U13 Apple IDs for Students?
We signed up to use that but even after working with Apple Enterprise support have not been able to upload the initial U13 file to start the processing. We are under the gun to get this process started so if you are successfully using this new U13 kiosk mode to create your Apple IDs please touch base with me. At this point since we can not get this to work we will use the older U13 program like last year with the parent confirmation e-mails, which is not ideal for our District.
Apple has posted all the WWDC session videos online, and there a lot in there. The Tuesday morning session on "What's New in Managing Apple Devices" contains especially important new announcements for the community of iOS administrators. There's a lot of great changes coming to iOS 9 and OS X "El Capitan."
In the spirit of the new, more open, WWDC Non-NDA, I'm linking to the full video and offering a short summary of the topics covered. It's really good to keep in mind that beta software is not production software, and may change before release.
In my opinion there were three big announcements. They are....drumroll:
- Devices can receive apps WITHOUT an Apple ID
- Apple is making supervision MUCH more important. Supervise your devices NOW.
- A whole new Configurator 2
If your job depends on managing Apple devices, I encourage you to watch the entire hour session.
Presenter: Todd Fernandez, Senior Manager, Device Management
Apple's Device Enrollment Program: A request to pronounce it by its letters "D.E.P." and not as a word "dep." DEP is now available in 26 countries
Enrollment optimization: New key in MDM to wait until device is fully configured. MDM commands now wait until..Apple ID, etc.
Automated Enrollment: enroll in MDM without screen taps. How does it work?
- Set up DEP
- Connect to Apple Configurator
- Configurator completes setup
- Focus on VPP Managed Distribution. 3 big changes
- VPP now in 26 countries
- Multinational app assignment: Purchase VPP apps in any country, distribute to any country where app is sold
Assign VPP distribution apps to devices (#1 Big announcement of the day)
- No invitation process
- No Apple ID required on device
- Does not appear in users purchase history
- Installation and updates controlled by MDM server
- Need to buy app for each device
- Can be revoked and re-assiigned
- "Smooth migration" from user assignment: app and data stays in place
NOTE: Requires Opt In from App developer on iTunes Connect. Best for apps to store app data in cloud.
Now also caches iCloud data, documents, CloudKit data, Photo Library, on-demand app resources
- Can convert apps from unmanaged to managed without losing user data
- Can install via MDM or Configurator while app store is disabled. (This is a biggie!)
New explicit user trust flow for apps, prevent user from trusting apps, Apps installed via MDM do not require explicit trust (finally)
New MDM Commands
- Available software updates
- Update to latest iOS (DEP supervised devices only)
- Network usage rules
- Restrict:Screen recording, trust new enterprise app authors, treat airdrop as unmanaged, automatic app downloads, iCloud photo library, keyboad shortcuts, modify device name, passcode, wallpaper, news, pair with Apple Watch
Deprecating MANY profile restrictions: these will require supervision in the future. (#2 Big announcement of the day)
- Restrict App Installation
- Restrict App Removal
- Restrict FaceTime
- Restrict Safari
- Restrict iTunes
- Restrict Explicit Content
- Restrict iCloud documents and data
- Restrict Multiplayer Gaming
- Restrict Add GameCenter Friends
Configurator 2 (#3 Big announcement of the day)
- “We’ve received a lot of feedback"
- Completed reinvented. "Apple Configurator 2” — New blue logo
- Devices front and center
- discrete tasks
- easy automation
- multiple stations
- companion to DEP and MDM
- Command line tool, scripting library, automator.
More information about automating workflows with Configurator is available in Session 306.
There wasn't a too much enterprise meat at yesterday's WWDC keynote buffet, but the feast isn't over yet! A session focused on enterprise and education is going to give us a lot more to chew on. The session begins at 11:00 San Francisco time, and if we are lucky it may be live-streamed for Apple Developer Program members.
What's New in Managing Apple Devices
Learn about the latest developments in managing Apple devices in large organizations. Learn the latest techniques to wirelessly configure settings, monitor compliance with policies, install apps and bulk configure devices with ease.
On the enterprise developer page, Apple is teasing a guide to "What's New — Coming Soon." By "Soon" I assume they mean "this afternoon." At the same time, as last year, Apple may be updating their prerelease reference guide for configuration profIles. It isn't updates yet, but when they do I'll post a summary here.
I created an AppleScript to automate clicking the verification link and signing in. The script is messy...I just wrote it and used it today and haven't cleaned it up or commented at all.
The workflow I'm using it with is like this:
Use the Apple ID creator script, using the same password for all of the accounts.
Setup an Outlook rule to move verification emails to a folder named "AppleVerify".
Create another folder named "AppleVerifyDone".
Then I run this script.
The script will scan through AppleVerify to grab the verification link and the apple id, opens safari to that link, input the Apple ID, and inputs the password. Then it closes the safari window and moves the email to AppleVerifyDone.
Again, it's really messy and it will probably break for you since I wrote it specifically for my workflow. But I figure it might help someone out.
Rename .txt to .scpt
Edit the idpassword and emaildomain variables
Progressing nicely and plan to put together directions once I'm done. Another question...
What are people doing for the field Rescue e-mail address? I don't THINK you can use the same one for all of the accounts you create. Or am I wrong?
Are you entering an address for that? Or leaving it blank?
Under the new iTunes accounts for under 13 and new managed app distribution model, what are folks going to do about Elem classroom Apple IDs? Ask as in the past I have just created one Apple ID to use between several classrooms at our Elem sites and they use it to obtain apps. Ask as I have been told that Apple is heavily pushing for only one Apple ID per one device to conform with their new licensing model. Kinda kills the classroom/school Apple ID setups......
I came across this issue when I got an iphone returned to me from a terminated employee.
I wanted to reset the iphone back to factory settings. When it came to the Apple ID section in the setup, it did not give me the option to bypass entering the Apple ID, but instead required me to enter an Apple ID and password. I did not have the credentials, and couldn't get past this step. As a result I couldn't finish the setup of the iphone, and now it is just a brick, and unusable.
I want to know if there is an Enterprise solution that I can use so that I can avoid this happening in the future. In other words, I want to keep the employee from creating and setting up the iphone with their Apple ID. Can I lock this step in the setup, or is there another way to keep employees from setting up there own Apple Id on a company owned device.
Thanks for your help with this.
Mobile Management Provider changed by 7PMDM 1 day ago
Mobile Management Provider changed by taylor 6 days ago
Story added by Aaron Freimark 6 days ago
Mobile Management Provider changed by taylor 1 week ago
Mobile Management Provider changed by MDMforALL 1 week ago
Story added by Aaron Freimark 2 weeks ago
Story added by Aaron Freimark 2 weeks ago
Story added by brendan 2 weeks ago
Story added by Aaron Freimark 4 weeks ago
Story added by Aaron Freimark 4 weeks ago
Wiki Page changed by Aaron Freimark 4 weeks ago
Forum topic added by taylor 5 weeks ago
Forum topic added by Mahesh 6 weeks ago
Story comment by taylor 7 weeks ago
Wiki Page changed by Aaron Freimark 7 weeks ago
Story added by Aaron Freimark 7 weeks ago
Mobile Management Provider changed by Aaron Freimark 7 weeks ago
Forum topic comment by Elizabeth Hale 23 weeks ago
Mobile Management Provider changed by Simo Kari 23 weeks ago
Forum topic comment by jpref 24 weeks ago