Joey King
5bf94d7f2f
Some checks failed
Regenerate Documentation Index / regenerate-index (push) Failing after 1s
66 lines
2.3 KiB
Markdown
66 lines
2.3 KiB
Markdown
---
|
|
title: MDM for iOS & iPadOS (Apple)
|
|
description: Mobile device management for iPhones and iPads.
|
|
category: services
|
|
tags: [mdm, services]
|
|
permalink: go.dbits.ca/dd/mdm-ios-ipados-apple
|
|
---
|
|
|
|
# MDM for iOS & iPadOS (Apple)
|
|
|
|
Manage and secure iPhones, iPads, and iPod touch devices across your organization with Apple's native management framework.
|
|
|
|
---
|
|
|
|
## Enrollment Methods
|
|
|
|
| Method | Best For | How It Works |
|
|
|--------|----------|--------------|
|
|
| **Apple Business Manager (ABM)** | New devices purchased through Apple or authorized resellers | Automatic enrollment on first boot, no user action needed |
|
|
| **Apple Configurator** | Existing devices | Connect via USB to a Mac running Configurator, enroll in bulk |
|
|
| **User Enrollment** | BYOD | User-initiated enrollment that separates work and personal data |
|
|
|
|
---
|
|
|
|
## Supervision
|
|
|
|
Supervised devices provide full management control:
|
|
|
|
- **App restrictions** - Block or allow specific apps
|
|
- **Single App Mode** - Lock device to one app (kiosks, point-of-sale)
|
|
- **Silent app install** - Deploy apps without user prompts
|
|
- **Content filtering** - Managed web filtering
|
|
- **Activation Lock bypass** - Recover devices locked to a former employee's Apple ID
|
|
|
|
Supervision requires enrollment through ABM or Apple Configurator.
|
|
|
|
---
|
|
|
|
## What We Can Manage
|
|
|
|
- **Wi-Fi and VPN** - Auto-configure network settings
|
|
- **Email** - Push mail, calendar, and contacts configuration
|
|
- **Apps** - Deploy internal and App Store apps via Managed Distribution
|
|
- **Security** - Enforce passcode, encryption, and biometric policies
|
|
- **Restrictions** - Control camera, AirDrop, iCloud, Screen Time, and more
|
|
- **Remote Actions** - Lock, wipe, or locate devices
|
|
- **OS Updates** - Schedule and enforce iOS/iPadOS updates
|
|
|
|
---
|
|
|
|
## BYOD vs Company-Owned
|
|
|
|
| Feature | BYOD (User Enrollment) | Company-Owned (Supervised) |
|
|
|---------|----------------------|---------------------------|
|
|
| Personal data visible to IT | No | No |
|
|
| Work apps managed | Yes | Yes |
|
|
| Full device wipe | No (work data only) | Yes |
|
|
| App restrictions | Limited | Full |
|
|
| Silent app install | No | Yes |
|
|
|
|
---
|
|
|
|
## Related Documentation
|
|
|
|
- [MDM Mobile Device Management](MDM_Mobile_Device_Management.md) - Overview of MDM services
|
|
- [MDM Android Google Samsung](MDM_Android_Google_Samsung.md) - Android device management
|