APL_Anderson

Q: Help with Configurator 2 and "Find My iPad"

I've got a brand new MacBook Pro with the latest El Capitan and iOS 9.1 updates, and (unfortunately) I've been forced to download Configurator 2.

 

I'm getting readying to deploy 20 new supervised iPad Air 2s in our public library for patrons to check out and take home with them. We want patrons to have the freedom to create and use their own Apple ID to explore/download apps and such, but we also need to enable "Find My iPad" in case they decide to not return the iPad to the library. However, if we have iCloud and "Find My iPad" enabled, we don't want them to be able to delete the iCloud account from the device.

 

Is this possible? How do we accomplish this? It looks to me like it's all or nothing in the restrictions in the profile config--either they can modify accounts (BOTH Apple ID and iCloud) or not.

 

Thanks in advance!

null

Posted on Dec 4, 2015 7:53 AM

Close

Q: Help with Configurator 2 and "Find My iPad"

  • All replies
  • Helpful answers

  • by elescobar,Apple recommended

    elescobar elescobar Dec 22, 2015 1:07 AM in response to APL_Anderson
    Level 1 (5 points)
    Dec 22, 2015 1:07 AM in response to APL_Anderson

    On one iPad, in Settings > iCloud, log in with the Apple ID you want associated with find My iPhone app.

     

    In Configurator 2, backup that iPad.

     

    Create/edit tthe profile you will install on the iPads.

    Inside Restrictions, uncheckf 'Allow modifying account settings'.  That should keep that iCloud account from being altered.

    Then, check 'Allow installing apps using Apple Configurator and iTunes', followed by checking 'Allow installing apps using App Store'.

     

    Save and install/update that profile to the iPads, and I think that would give you what you're looking for.

    Only other thing I would add is that any iCloud account anyone adds in for the App Store, must have a credit card attached to it, even if the app is a free one.

  • by rccharles,

    rccharles rccharles Dec 22, 2015 10:36 AM in response to elescobar
    Level 6 (8,486 points)
    Classic Mac OS
    Dec 22, 2015 10:36 AM in response to elescobar

    Only other thing I would add is that any iCloud account anyone adds in for the App Store, must have a credit card attached to it, even if the app is a free one.

     

    When you set up an apple id, download a free app as the first app you install.  Do so, lets you set up the apple id without a credit card.

    Create an iTunes Store, App Store, or iBooks Store account without a credit card or other payment method - Apple Suppor…

  • by APL_Anderson,

    APL_Anderson APL_Anderson Dec 30, 2015 8:33 AM in response to elescobar
    Level 1 (10 points)
    Dec 30, 2015 8:33 AM in response to elescobar

    Okay, I'll have to try this (haven't had a chance because of the holidays). But, isn't there a limit to how many devices you can have associated with a single iCloud account? (10, correct?)

  • by rccharles,

    rccharles rccharles Dec 30, 2015 1:14 PM in response to APL_Anderson
    Level 6 (8,486 points)
    Classic Mac OS
    Dec 30, 2015 1:14 PM in response to APL_Anderson

    with a single iCloud account? (10, correct?)

     

    "Sign with your Apple ID to use iCloud, the iTunes & App Store, and more"

    https://www.apple.com/support/icloud/setup-signin/

    I think it is better to view as an apple id and iCloud service.  For an apple id, it's 10 max devices which includes computers. Might be less for only ios devices.  From my understanding from a legal perspective, all the devices shared with one apple id need to be used exclusively by the same person.  An app you buy under the same apple id is available for use by any device associated with the apple id.

     

    I think you should have one apple id per device. I do not use iCloud.  I've read where people with iCloud accounts get all their icloud data shared among all enrolled devices. [ much to the surprise of some ex- husbands and wives. ]

     

     

    "Deploying a great quantity of iOS devices means creating a great quantity of Apple IDs. This script allows automated Apple ID creation from a spreadsheet."

    http://www.enterpriseios.com/wiki/Apple_ID_Automation_Builder

     

    -------------------------------------------------

     

    In enterprise setting, the best way is to buy your devices so that they are in DEP.  This establishes the institution as the owner.  You then set set to point to an MDM.

     

    "This document offers guidance on some important considerations for getting the most out of your iOS deployment." Covers: Prepare your infrastructure.  Set up devices.  Configure and manage devices.  Deploy apps and content.  Plan for support.

    https://www.apple.com/business/docs/iOS_Enterprise_Deployment_Overview.pdf

    Quick overview of zero touch deplayment

    http://www.apple.com/education/it/dep/

     

    Consider DEP, Device Enrollment Program. Use VPP, Volume Purchase Program.  Select an MDM, Mobile Device Management.  Read the Google doc below and nsdjoey write up.

     

        Overview of ipad & iphone deployment.  

          It's education focused.

          http://www.apple.com/education/it/

     

        Writing you own app for your business:

          https://developer.apple.com/enterprise/

        

        MDM --  Mobile Device Management 

          https://developer.apple.com/videos/play/wwdc2015-301/

          For a comparison see this page:

          http://www.enterpriseios.com/wiki/Comparison_MDM_Providers

     

        VPP -- Volume Purchase Program

          http://www.apple.com/business/vpp/

          http://www.apple.com/education/it/vpp/

  • by rccharles,

    rccharles rccharles Dec 30, 2015 1:30 PM in response to APL_Anderson
    Level 6 (8,486 points)
    Classic Mac OS
    Dec 30, 2015 1:30 PM in response to APL_Anderson

    Inside Restrictions, uncheckf 'Allow modifying account settings'.  That should keep that iCloud account from being altered.

     

    Don't you want the user to be allowed to use there own apple id?  My guess would this setting would prevent the user from changing to their apple id.

     

    You could let the apple id on the machine active.  You can remove your credit card from it.  The downside all patrons will be able to see all free download apps by prior patrons.

     

    You can have one two or three apple ids per device.  You can only login to one apple id at a time.  Do not know how this effects the activation lock. Could very well nullify if the apple id with the activation lock was not logged in.  You should check this out.  Too scared to try on my iphone

     

    R

  • by APL_Anderson,

    APL_Anderson APL_Anderson Jan 7, 2016 11:19 AM in response to rccharles
    Level 1 (10 points)
    Jan 7, 2016 11:19 AM in response to rccharles

    Right--unchecking "Allow modifying account settings" in Restrictions won't allow the patron to then use their own Apple ID. I do NOT want to manage any Apple IDs for these iPads.

     

    Right now I have bigger problems trying to deploy these iPads and I've talked to Enterprise support several times. Once I get my other issues ironed out, I will come back to this one.