Apple Configurator MDM Site - Review

Transcription

1 Management Options ios

2 New Market ipads - January 2010 Several changes in a short period of time. Apple Lion Server came out June Apple Configurator came out in June 2012.

3 Why Absolute or Alteris? MPS and OPS Lion Server too limited Mountain Lion out after decision was made. Apple servers only supported ios App Deployments not supported by Apple Document Deployments

4 Current MPS Plan Institutional Student Devices not 1 to 1 AC all Apps All other settings from MDM Layered NA Personalized All Staff Devices AC no Apps All settings/apps from MDM

5 Current OPS Plan Institutional Student Devices not 1 to 1 AC all Apps All other settings will come from Alteris Layered All Staff Devices AC all Apps Will move to Alteris

6 MDM MDM = Mobile Device Management Supports Windows Phone Devices ios & higher Android Devices w/ Google Play* * No Nooks or Kindles

7 MDM MDM communicates via notification server operated by Google, Microsoft, or Apple. MDM does not directly communicate with device. When device is offline, the command doesn t get delivered until it is online. Device can be managed by only 1 MDM.

8 Why MDM Inventory Tracking Device Locks Remote Erase Messaging Document Deployment Policies App Deployment*

9 Smart Groups Absolute All Settings based on manual or smart groups. Smart Group Examples: Specific hardware AD groups Software groups Naming convention

10 Inventory Name Model OS Version Serial Number Last Contact Capacity IP Address Jailbroken Age Installed Apps Manufacturer Display Resolution AD User Info

11 App Deployment MDM does NOT deploy actual App Apple App Store Google Play Store. JamF and Mountian Lion server will deploy App Directly. NOT support by Apple.

12 App Deployment Absolute Absolute Manage 1.3 Lists only District Approved Apps Apple s Apps Store & Google Play still available Redeems Apple s Codes per User

13 Communication Messages can be sent directly to devices to communicate with the end users. * *Depends on users Notifications settings None, Banner, & Alert.

14 ios Policies Configuration of Passcode Requirements Disable Camera Disable Screen Capture Disable Shared Photo Streams Disable imessage Disable Siri Disable Bookstore (or subset) Allow Installing of Apps (direct on device) Allow Removing of Apps Allow icloud Document Sync Allow icloud Backup Force Encrypted Backups Allow YouTube Allow Content Ratings for Movies, TV, and Apps...

15 Andriod - All Tracking Absolute Specs Windows Phones - All ios ios 5 and up Note: When Absolute App is updated past version 1.3 this feature could be removed as per Apple.

16 Tracking A device that has been stolen and placed on a wifi network will check in. A device that has been stolen and not placed on a wifi network will not check in. A device that has been stolen and is erased, then put on a wifi network will not check in.

17 Remote Erase When a device is lost the MDM can send a remote erase command. EVERYTHING is erased. Device has to hit a network in order to get the erase command.

18 Locks Can t stop user from setting a lock. Can require user to set a lock. Can require user to set a specific security for a lock. Can unlock a device when a user forgets the lock code. Can unlock a device when a student sets a lock. Can lock a device that has been lost for security.

19 Document Deployment Absolute & Meraki* Absolute Safe ios Devices only Web.html.xml.pdf Text.rtf.doc &.docx Presentation.ppt &.pptx Spreadsheets.xls &.xlsx Images.bmp.gif.jpg.jpeg.png.tif Audio.m4a.m4b.mp3.swa.mpeg.wa Movie.mp4.mov.avi.qt

20 Document Deployment Absolute Auto-Install On-Demand Auto-Install, Auto-Remove On-Demand, Auto-Remove *Some files can be moved out of Absolute Safe to some other Apps.

21 Management Absolute Management console win & mac Set specific AD users to manage specific Devices. Set specific permissions for those managers.

22 Training MPS Staff for Staff Devices. Training to receive device. App Deployment Document Deployments Self Help Staff for Student Devices. App Deployment Document Deployments - Curriculum Policy & Rule (accounts and data storage)

23 Training OPS All district Techs manage apps and devices Staff is trained by school by district staff All apps are approved by the district before loaded

24 Apple

25 Deployment Tools Apple Controls how Apps are deployed to devices. Tools for App Deployments itunes Apple Configurator MDM Solution

26 itunes Tool Pros One Codes are Redeemed for Apps Several Codes are Not Redeemed Cons Wired Distributions Manage ONE device at a time. Legal only if you purchase the number of codes per install. No App Code Tracking Causes issues with User itunes Syncing Home User Solution

27 Apple Configurator Tool Pros App Code Tracking App Transfers to other devices Device Templates Allows for Supervision of devices Uses District Apple ID Cons All Codes are Redeemed for Apps Wired Distribution of Apps Apps have to be deployed/updated when connected to AC Program is only a few months old

28 MDM Tool Pros Wireless App Deployment App Code Tracking Contains all other aspects of MDM (Inventory, tracking, locks, erase, communication, policy management) District App Store Advertising District Approved Apps User Updates Apps MDM Can Remotely Remove Apps Cons No App Transfers to other devices/users

29 Apple IDs MPS Apple IDs are required to be setup using a district .* Home Apple IDs can be kept separate from work Apple IDs. One ios device is configured to use one Apple ID or no Apple IDs. Multiple Apple IDs should not be used on one ios device. *As per district guidelines.

30 Apple Deployment Models Personal Ownership Institutional Ownership Layered Ownership *As per Apple s ios 5 Education Deployment Guide.

31 Personal Ownership Works with the MDM to deploy the Apps to devices. User owns apps Least management time. User required to redeem codes and download apps. Allows users to personalize devices Apps are disposable

32 Personal Use User can personalize the device with their own department s apps and free apps. User downloads all district apps User can use with itunes on computer. User can sync with icloud User can only use District Apple ID User updates all Apps and OS * As per district guidelines.

33 Institutional Ownership All Apps are owned by one Apple ID maintained by District. All devices would have to come back to central computer running Apple Configurator to receive applications. Maximum management time.

34 Institutional Use User can NOT personalize the device with any Apps. User can NOT use with itunes on computer. User can NOT sync with icloud ios device is not configured with Apple ID User can not update Apps or OS

35 Layered Ownership Some Apps are deployed via Apple Configurator. Some Apps are downloaded directly from ios device or MDM. Best model if Base Apps are installed on all devices. Medium management time.

36 Layered Use User can personalize the device with their own department s apps and free apps. User can use with itunes on computer. User can sync with icloud User can update their installed Apps and OS District Apps would have to come back to AC for updates. User can only use District Apple ID * * As per district guidelines.

37 Deployments & Codes Apps Store - On Device Code ed to user & redeemed MDM On Device Code delivered via MDM & redeemed itunes Synced Code redeemed in itunes Apple Configurator Synced Code redeemed in AC

38 Concerns Security Quick Changes to Market BYOD District Multiple Purchases Instant App Deployment Instant App Un-Installs Burning of Codes Lifespan Apps & hardware