ios 9.3
All the new stuff for enterprises in iOS 9.3
Apple's released iOS 9.3 about a week ago, then pulled it for many devices, then re-released it yesterday, hopefully for good. There's a LOT of new features for enterprise in here, and we'll try to break it down for you.
Some of these features require MDM support, so you will need to wait for your MDM to support them. Others only need a configuration profile which you can create with Apple Configurator 2 or by hand (if you are adept at manipulating XML), and then distribute using your MDM. Apple's configuration profile reference is now a public document.
ALL of the new commands require Supervision on your devices to prove that they are corporate-owned. Supervision is available by the Device Enrollment Program, or by the Mac software Apple Configurator, or by using the cross-platform GroundControl (disclaimer: that's my company).
Lost Mode
Requires MDM Support
Supervised Only
Allows MDM to retrieve the longitude and latitude of a device marked “Lost”, and displays custom text (such as a phone number) on the lock screen. Seems to be the enterprise version of “Find My iPhone” without the hassles of Apple IDs and activation lock.
Home Screen Layout
Configuration Profile: Example
Supervised Only
Enforce home screen icon positions, locking apps in place and making them undeletable.
App Whitelist and Blacklist
Configuration Profile: Example
Supervised Only
Prevents apps listed (including all built-in Apple apps except Settings and Phone) from being shown or launchable, or specifies a whitelist of apps that are the ONLY ones that can launch. If you try to include Settings in the payload the device will reject the configuration profile. This is a long-awaited feature and we're happy to have it (although we wish it could hide Settings too).
Shared iPads & Education Features
Configuration Profile & MDM support required
Supervised Only with new shared device mode
Now labeled a “Preview”, Shared iPads are initially being promoted by Apple for education use only. Setup involves multiple steps, and requires several tools. There's a new Apple School Manager system that's a bit like DEP and a bit like our Apple ID Batch Creator. We’ll explore this more in the future. Allows a school to specify users & classes & groups, assign these to specific devices, and log out users from devices.
Set Notifications
Configuration Profile
Supervised Only
Specify which apps should get which notification types (none, banner, modal alert, etc.)
Lock Screen Text
Configuration Profile: Example
Supervised Only
iOS 9.3 now prints (very) small text at the bottom of the lock screen. Two configuration profile keys allow administrators to specify additional information: an Asset Tag and and an "If Lost..." message.
New Restrictions
Configuration Profiles
Supervised Only
New restrictions to block the Apple Music service, block iTunes Radio, prevent changes to Notifications settings, and to restrict Safari password saving to specified domains only.
About the security content of iOS 9.3
Apple has published a list of security updates in iOS 9.3: https://support.apple.com/en-us/HT206166
New MDM Features in iOS 9.3
There's been a lot of press on the new features coming out for iOS 9.3, but most of this hasn't covered the more subtle, MDM functionality enhancements. Namely:
- Ability to enable/disable apps from running
- Ability to reconfigure icon layout on the Home Screen
- Control over notification settings
- Additional restriction options
- Safari auto-fill domain control
We go into more depth in the following article:
http://simplemdm.com/2016/03/04/ios-9-3-to-bring-new-mdm-features/
Feel free to respond, I'll answer any questions the best that I can
Recent Activity
-
Story added by Aaron Freimark 5 days ago
-
Mobile Management Provider changed by SteJohGbg 7 weeks ago
-
Mobile Management Provider changed by taylor 11 weeks ago
-
Story added by Aaron Freimark 12 weeks ago
-
Story added by Aaron Freimark 14 weeks ago
-
Mobile Management Provider changed by ZuluDesk 15 weeks ago
-
Wiki Page added by digitalmarketin... 19 weeks ago
-
Mobile Management Provider changed by Mahesh 19 weeks ago
-
Story added by Aaron Freimark 19 weeks ago
-
Mobile Management Provider changed by Neeraj 21 weeks ago
-
Story added by DaddyOfThr33 22 weeks ago
-
Story added by Aaron Freimark 24 weeks ago
-
Mobile Management Provider changed by sb-miradore 25 weeks ago
-
Story comment by Aaron Freimark 28 weeks ago
-
Story added by Aaron Freimark 28 weeks ago
-
Story added by Aaron Freimark 29 weeks ago
-
Story added by Aaron Freimark 30 weeks ago
-
Story added by Aaron Freimark 30 weeks ago
-
Story added by Aaron Freimark 30 weeks ago
-
Story added by Aaron Freimark 30 weeks ago