Apple’s Device Enrollment Program allows us to have more control over our iOS devices. Three key things it affords us are:
- Devices purchased through Apple Education are automatically enrolled in the program and in turn are automatically added to our Meraki MDM system.
Note: If your school PTA (or other organization) wants to buy iPads with their funds and wants to purchase directly from the Apple Store, contact me BEFORE making the purchase. These iPads can be enrolled in the DEP but certain information is needed at the time of purchase.
- Devices are able to be put into a “supervised” state wirelessly alleviating the need to sync them with a computer.
- MDM enrollment can be forced. Even if the device is stolen and reset, the next time it is setup it will rejoin our Meraki MDM system. This provides a good theft deterrent and allows us to make a missing device essentially unusable.
Devices can be added to the Meraki MDM system (or any MDM) without being supervised, but control is limited. Some of the restrictions that can only be controlled using an MDM system on a supervised device include:
Allow app removal
Allow Game Center
Allow Bookstore erotica
Allow UI configuration profile installation
Allow modifying account settings (iOS 7+)
Allow AirDrop (iOS 7+)
Allow changes to cellular data usage for apps (iOS 7+)
Allow user-generated content in Siri (iOS 7+)
Allow modifying Find My Friends settings (iOS 7+)
Allow host pairing (iOS 7+)
Enable Siri profanity filter
Allow configuring restrictions (iOS 8)
Allow Erase All Content and Settings (iOS 8)
Allow Podcasts (iOS 8)
Allow Internet results in Spotlight (iOS 8)