We are often asked to compare MDM providers and explain Apple iPad deployment possibilities.
While a guide cannot explain every detail, its worth calling us in for a consultancy meeting (or video conference) to explain all of the options to you in person.
Many things have changed with iOS9 along with one exciting feature of not needing an Apple ID on each and every device to deploy an app to an institutionally owned device. This does simplify some aspects of the deployment to the end users, but has added some technical changes. For a successful deployment you will need a compatible MDM (see below Compatible iOS9 deployment).
For this to work, one needs a VPP & DEP account from Apple, with all devices enrolled into the account. Devices that are not enrolled in DEP wont work using this new deployment method. Reasons a device may not be eligible – device must be owned by institution, purchased after March 2011, reseller must support DEP and reported your serial number to Apple. Apple have said to me if a reseller has had bad record keeping then Apple will not support you.
Where a device doesn’t work in this solution; all is not lost as the older method of having an Apple ID on each device will still work fine; the only issues you will have is Apps will stop deploying every time Apple updates their App Store terms and conditions (easily solved by agreeing to T&C on each device). Additionally Apple will restrict the whitelisting process (that allows you to mass create Apple IDs) to only special circumstances – i.e. you are rolling out a 1:1 programme and students/teachers want to setup device and add an Apple ID.
The comparison chart below is a loose guide based on our experiences & testing (and chats with solution providers). If there is any thing useful to add let us know.
We are vendor neutral when we recommend solutions to our schools; though we have recently become a reseller for Meraki and Lightspeed. Pricing is approximate, subject to change, sometimes discounts possible etc.
You didn't add any pricing tables yet!
Contact us to get started!
Guide to the above table:
iOS 9+ Restrictions
| Disallow sharing of managed documents with AirDrop (iOS 9) |
| Allow iCloud Photo Library (iOS 9) |
| Allow App Store (iOS 9) |
| Allow keyboard shortcuts (iOS 9) |
| Allow pairing with Apple Watch (iOS 9) |
| Allow modification of passcode settings (iOS 9) |
| Allow modification of device name (iOS 9) |
| Allow modification of wallpaper (iOS 9) |
| Allow automatic downloading of apps purchased on other devices (iOS 9) |
| Automatically trust enterprise apps (iOS 9) |
| Allow News app (iOS 9) |
iOS 8+ Restrictions
| Allow Handoff (iOS 8+) |
| Force paired Apple Watch to use Wrist Detection (iOS 8.2+) |
| Allow backup of enterprise books (iOS 8+) |
| Allow notes and highlights sync for enterprise books (iOS 8+) |
| Allow managed app to store data in iCloud (iOS 8+) |
| Allow configuring restrictions (iOS 8+) |
| Allow Erase All Content and Settings (iOS 8+) |
| Allow Podcasts (iOS 8+) |
| Allow Internet results in Spotlight (iOS 8+) |
| Allow definition lookup (iOS 8+) |
| Allow spell-check (iOS 8+) |
| Allow auto-correction (iOS 8+) |
| Allow predictive keyboard (iOS 8+) |
iOS 7+ Restrictions
| Show Control Center in lock screen (iOS 7+) |
| Show Notification Center in lock screen (iOS 7+) |
| Show Today view in lock screen (iOS 7+) |
| Allow documents from managed apps in unmanaged apps (iOS 7+) |
| Allow documents from unmanaged apps in managed apps (iOS 7+) |
| Allow cloud Keychain sync (iOS 7+) |
| Allow automatic updates to certificate trust settings (iOS 7+) |
| Force limited ad tracking (iOS 7+) |
| Allow modifying account settings (iOS 7+) |
| Allow AirDrop (iOS 7+) |
| Allow changes to cellular data usage for apps (iOS 7+) |
| Allow user-generated content in Siri (iOS 7+) |
| Allow modifying Find My Friends settings (iOS 7+) |
| Allow host pairing (iOS 7+) |
| Enable web content filter (iOS 7+) |
General Restrictions
| Allow adding Game Center friends |
| Allow app removal |
| Allow automatic sync when roaming |
| Allow backup |
| Allow Bookstore |
| Allow Bookstore erotica |
| Allow diagnostic data to be sent to Apple |
| Allow document sync |
| Allow explicit music and podcasts |
| Allow FaceTime |
| Allow Game Center |
| Allow iMessage |
| Allow in-app purchases |
| Allow installing apps |
| Allow multiplayer gaming |
| Allow Passbook notifications while locked |
| Allow photo stream |
| Allow screen capture |
| Allow Siri |
| Allow Siri while locked |
| Allow Touch ID to unlock device |
| Allow UI configuration profile installation |
| Allow use of camera |
| Allow use of iTunes Store |
| Allow use of Safari |
| Allow user to accept untrusted TLS certificates |
| Allow voice dialing |
| Block popups |
| Enable autofill |
| Enable Global HTTP Proxy |
| Enable javascript |
| Enable Siri profanity filter |
| Force encrypted backup |
| Force fraud warning |
| Force user to enter iTunes Store password for all purchases |
| Require passcode on incoming AirPlay pairing requests |
| Require passcode on outgoing AirPlay pairing requests |