PrivateB

Q: Keep MDM Profile

I set up a combination of Apple Configurator and Server OS X, so that I can administrate iPads wirelessly (push). I had to install a config file, so that the ipad gets registered in the Profile Manger of the server.

 

On the ipad you can see that profile and it can be easily deleted, i didnt find an option to prevent this. Does such an option exist, so that no user (pupils) can deactivate the server administration?

iPad Air, iOS 9.3.2

Posted on Jul 5, 2016 11:58 AM

Close

Q: Keep MDM Profile

  • All replies
  • Helpful answers

  • by celliott147,

    celliott147 celliott147 Jul 5, 2016 9:11 PM in response to PrivateB
    Level 4 (1,583 points)
    Apple Watch
    Jul 5, 2016 9:11 PM in response to PrivateB

    Yes, you can set it to not be removable. It should be in general -> security. I strongly recommend a more robust solution like Casper or MobileIron to manage your devices as well as purchasing them through the Device Enrollment Program (DEP) if you aren't already.

  • by PrivateB,

    PrivateB PrivateB Jul 5, 2016 10:28 PM in response to celliott147
    Level 1 (5 points)
    Servers Enterprise
    Jul 5, 2016 10:28 PM in response to celliott147

    Thanks for the answer. Thats not exactly what I mean. I have to install a config file, that has been created through Server X Profile Manager, so I can add devices through Apple configurator to Server X Profile Manager. This "Profile", perhaps "profile" is the wrong word, perhaps you can better say: this instructions for a wireless administration can be deleted by the users and I really dont know how to prevent this. When User delete this "instruction" all restrictions I made are gone (for example: camera use)

     

    The "normal" profiles, I installed through Apple Configurator, as for example the information for Wireless Lan Access, can be set to non removable via Apple Configurator, but not via server x profile manager. When I check those boxes in Server X profile Manager, there is no effect on the ipads. So I guess, profiles installed via Apple configurator cannot be changed afterwards through Server X profile manager, right?

  • by Der Petersen,

    Der Petersen Der Petersen Jul 14, 2016 2:21 AM in response to PrivateB
    Level 1 (8 points)
    Servers Enterprise
    Jul 14, 2016 2:21 AM in response to PrivateB

    If i'm not wrong this is only possible if the Devices comes over DEP ...

    Then you can disable the abillity of removing!