MDM issue

[Claire]

Hi everyone,

Looking for help installing a MDM profile on a specific iPad. The iPad had to be rebooted as it was locked. Since then, I've had trouble installing the MDM on the device. It's running iOS 10.3.3 so not sure if it's related to the age of the device? I have installed the MDM profile and it has downloaded our school's apps but hasn't installed our school wallpaper, homepage, collated the apps into groups etc. Could anyone advise?

Claire

[Chris Reina]

Hi Claire,

It depends of course on the MDM… they’re all a little different. Jamf, Mosyle, etc. install slightly differently.

Given the behaviour you’ve described - I would concur that it may well be to do with the age of iOS on the device.

However - if it worked before - it should again. I have found this when updating devices from time to time. There’s always one.

I’m going to presume you’re trying to install OTA (over the air) rather than wired. I would try a full wipe and update the device (as far as it will go) before enrolling in the MDM.

If that doesn’t work - once trusted and enrolled (ensure the Trust Certificate is up-to-date and valid on the iPad) then try pushing the Homepage “app” to the device and see what happens.

In the MDM - if it still shows as not being allowed, it may be that the MDM has moved beyond the version of iOS you have.

One final thing you can try - sometimes the Wifi within a school can stop updates, etc. from happening - try doing it at home on your own network where there are no restrictions.

Feel free to reach out if you’re still having issues.

Cheers,

Chris

--
--
You received this message because you are subscribed to the Google
Groups "CESI-list" group.
To post to this group, send email to cesi...@googlegroups.com
To unsubscribe from this group, send email to cesi-list+...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/cesi-list?hl=en-GB where all messages are archived and are publically available to non members of the list. Messages may also show up in search engines etc.
Visit the web site www.cesi.ie
Attempts to use the list for commercial purposes may result removal from the list.
---
You received this message because you are subscribed to the Google Groups "CESI-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cesi-list+...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/8edfdba1-99ea-4857-aa8e-e594e08dbc18n%40googlegroups.com.

[Colm Bannon]

Hey

Was the device completely wiped? Sounds like it's no longer a supervised device if it not changing apps layout and wallpaper.

Could be wrong, just my thoughts.

Regards,

Colm

To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/bafda5a8-f3e6-4302-bfc5-5aad69a79bb8%40Spark.

Dublin Road, Co. Longford, N39 DY23

043 33 45700

http://www.stjosephsns.ie

 Roll No: 18178R

This message is intended only for the use of the person(s) to whom it is addressed. It may contain information, which is privileged and confidential. The unauthorised use, disclosure, copying or alteration of this email message is strictly prohibited. If you are not the intended recipient, please contact the sender as soon as possible. The views expressed in this communication may not necessarily be the views held by the Board of Management of St. Joseph's National School.

[Claire Daly]

Thanks Chris and Colm,

Colm, yes - the device was completely wiped and it is showing on Jamf as unsupervised. Despite my best efforts I can't get it back to supervised status?

Thanks Chris, have tried it at home so not a Wifi issue as far as I know. As you say it's likely got to do with its age, but all other devices of the same age are behaving! I'll keep trying.

Claire

To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/CAD2TJ%2BhKEjwxNgygCyWSa3K-vE_ttvq4XCEBFp4w5306mTQaJw%40mail.gmail.com.

[Chris Reina]

Hi Claire,

Thanks for that info - we know now that Jamf is your MDM and it’s not supervised.

This may (or may not) be an issue.

iPads can have 2 different “modes” - either supervised or unsupervised. To supervise the device, you will need to plug it in to a Mac and supervise it using Apple Configurator.

If you have never done this - I would guess whomever you purchased the device from would have done that for you.

Ultimately, this may not matter - you do get more finite control over a device if it is supervised, but that may not be needed.

I think this is the answer to your question - if you supervise the device, you may find the settings will apply.

Check first to see if you have a Mac that has been used to supervise the devices. (You should!) If not, the reseller holds this control and you will need to contact them.

Cheers,

Chris

To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/CAPtHQFkO12o5WRDkEGhBqJwmdWVQmrBTbJT3T1941b0hoUrppA%40mail.gmail.com.

[Éanna]

You can learn more about supervision here: https://support.apple.com/en-us/HT202837

If you purchase an iPad/Mac from an Apple Authorised Reseller (AAR) or Apple Authorised Education Specialist (AAES) (e.g. Compu b or Wriggle).  They can add the device to your Apple School Manager (ASM) account and you can supervise the device over the air using a suitable MDM.  

If you have purchased the device elsewhere (or it was donated to the school) or was not enrolled in ASM when purchased.  You must manually enrol the device into Apple School Manager to supervise the iPad/Mac/iPhone over the air.  You can manually enrol the device into your ASM using Apple Configurator. 

Supervising 'over the air' gives so much control to the organisation without having to touch every single device.   

To retain the the chain of custody an AAR/AAES can only enter the device that they have supplied into a school's ASM.

Devices that are in the school ASM are 'known to Apple' as owned/managed by the school and as a result can be unlocked (PIN/activation lock etc) (by AppleCare) for the school if needed.

Loads more to learn here in the Education Deployment Guide

Éanna

[Claire Daly]

Thanks folks,

Got notice of an inspection so my MDM issue went by the wayside for a few days there! I installed Apple Configurator on my personal Mac, downloaded the MDM profile and tried installing it from there but I'm getting the notice 'The certificate Client.plx' could not be imported'. Will need to look into it further.

Thanks again,

Claire

To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/15062cba-22cf-45a2-8cc4-c96d89d9e698n%40googlegroups.com.

[Chris Reina]

Hi Claire,

Feel free to give me a ring if you like. Once you delve into that area - it gets quite confusing. 

Cheers,
Chris

To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/CAPtHQFmD61f_LK6S-MJizb3JXCvQV6Rz77EOAf%3DSpZ%2B-9Ck1Cg%40mail.gmail.com.

[Colm Bannon]

Hi

Great you figured what was wrong Claire. I had similar issue with iPads that were donated to school.

Just to add to Chris's advise. If you don't have an apple device. You can use imazing on Windows devices. However, you do have to pay for a license. 

https://imazing.com/guides/how-to-supervise-iphone-ipad

Regards, 

Colm

To view this discussion on the web, visit https://groups.google.com/d/msgid/cesi-list/3f4dff65-0813-402a-9417-7fa38a633652%40Spark.