profile manager - avoid Remote management profile being removed

Question

profile manager - avoid Remote management profile being removed

Hi,

I'm setting up Profile Manager on Mountain Loin. While testing, I downloaded and installed the "Enrollment profile" on the iphone and it automatically installed a profile named "Remote Management" and all other device profiles I created. While I was setting up the devices profiles, I set the Security (to remove profile) to require password. This stop me from removing the profile from the iphone. However, I was still able to remove the "Remote Management" profile. As soon as I remove "Remote Management" profile from the iphone, all other profiles were gone, too.

Is it possible to prevent "remote Management" profile being removed?

Thanks,

Aldous

Posted on Sep 18, 2012 9:44 AM

Reply

Answer 1

Oct 14, 2012 9:25 AM in response to Some One Here

The answer unfortunately is a resounding No. I just ran into this myself, using Profile Manager to manage a bunch of iPads and the like. Ridiculous, you can control anything/everything under the sun *except* the ability to remove the Remote Management profile itself. Makes no sense, and makes Profile Manager totally neutered. Apple, are you listening??? Fix this, pretty please.

Reply

Answer 2

jbitzW

Level 1

0 points

Jun 6, 2014 12:39 PM in response to Some One Here

It is possible. I just ran into this myself. The key is in understanding the difference between Supervised and unsupervised devices. Only supervised devices can be locked to an organizations profile manager. Devices are considered supervised when they are purchased by a company with a business account and account manager from apple.

If the device is supervised there are now additional settings you can adjust. You can also create device groups. Any device purchased from apple without a business account, or from anywhere else, is considered to be an unsupervised device. You can still add it to profile manager and control a lot, but the end user will be able to remove the Management Profile, and thereby all other profiles rolled out on the device or user level.

When you purchase from the apple business store, your account manager will set up a list of the devices.

You log into the Apple Deployment site and enter your order number.

All your new devices are auto ported into your profile manager.

At that point you can set them to device groups

set device groups settings

then when turn them on they will force you to login, register, etc etc.

After that you can layer on device and/or user profiles on top of your group profile.

Reply