Activation Lock and MDM

Question

Level 1

8 points

Activation Lock and MDM

Hi folks!

A question regarding MDM and Device Activation Lock.

We are currently using Airwatch as our Management solution, and have a mixture of iPad Minis, iPad Airs and the occasional iPod touch and iPhone (4S and 5S) so mostly running up-to-date IOS, with a few exceptions that we're not particularly concerned about with the older iPod Touches.

Each device has it's own unique iTunes/iCloud account, and is prepared and supervised using Apple Configurator.

We would like to use Activation Lock to prevent anyone wiping a device and re-configuring it as a bog-standard iPad, but it appears that supervising a device will disable Activation Lock, and I can't see a way to re-activate it.

Anyone have any ideas regarding how to go about this? I've done a bit of googling, but most of the results I've turned up have been regarding removing activation locks rather than setting them up.

iPad, iOS 9.1

Posted on Dec 2, 2015 2:35 AM

Reply

Answer 1

-JohnP- Author

Level 1

8 points

Dec 2, 2015 6:42 AM in response to tech-itunes-MDS

Afraid not - Irritatingly, Activation lock is disabled when a device is supervised, and I can't find a separate way to turn it on.

All our devices (of which we have nearly 800) are Find my iPhone activated, and yet none have activation lock.

It may well be an issue that I have to take up with Airwatch rather than looking for an Apple solution, but I thought I'd try here too.

Use Mobile Device Management and Find My iPhone Activation Lock - Apple Support

Reply

Answer 2

rccharles

Level 6

13,037 points

Dec 2, 2015 12:04 PM in response to tech-itunes-MDS

Corporate ownership starts with using DEP. Dep established the corp as the owner of the device. Hence, the user cannot set the activation lock. Dep locks the device to an mdm.

"This document offers guidance on some important considerations for getting the most out of your iOS deployment." Covers: Prepare your infrastructure. Set up devices. Configure and manage devices. Deploy apps and content. Plan for support.

https://www.apple.com/business/docs/iOS_Enterprise_Deployment_Overview.pdf

Quick overview of zero touch deplayment

http://www.apple.com/education/it/dep/

Consider DEP, Device Enrollment Program. Use VPP, Volume Purchase Program. Select an MDM, Mobile Device Management.

Reply

Answer 3

-JohnP- Author

Level 1

8 points

Dec 2, 2015 6:57 AM in response to -JohnP-

OK Guys, ignore this one. The solution turned out to be hiding in Airwatch's device management console. Found the required option, and am currently testing with a push of the option to the ICT group before it goes out company-wide.

Reply

Answer 4

Dec 2, 2015 5:53 AM in response to -JohnP-

Activation Lock is a side-feature of "Find My iPad". Turn that on Settings --> iCloud and the device will be activation locked.

Reply

Answer 5

Dec 2, 2015 8:09 AM in response to -JohnP-

INTERESTING!

Thanks for the followup - we're starting to look at MDMs, and that's a nice tidbit o' info.

Reply