Transcript iOS Headache? Get a grip on your devices

Chris Nilsson
[email protected]
g
@chrisnilsso
n
Enterprise iOS
Plugging the Holes
Agenda
1
Device Management
3
Content Management
3
Volume Purchase Program
2
Lamar CISD's Hybrid Model
5
Q&A
iOS Progress
Multiple iTunes
Accounts on a
device
2
3
App store
iPhone
Configuration Utility
4
PC Free
iCloud
Push Apps*
5
Native MDM
Wireless App
Distribution*
4
Supervise Mode
Force HTTP Proxy
Set Wallpaper
Device Management
Apple's Version
Device Settings
User Configuration
Restrictions
Security
Device Management
Apple's Version
Device Settings
• WiFi
• Passcode
Restrictions
• Web Clips
User Configuration
Security
Device Management
Apple's Version
Device Settings
• WiFi
• Passcode
Restrictions
• Web Clips
• Exchange
• LDAP
• VPN
User Configuration
Security
Device Management
Apple's Version
Device Settings
Restrictions
• WiFi
• Web,YouTube, App Store
• Passcode
• Camera, FaceTime, iCloud
• Web Clips
• Content Ratings
• Exchange
• LDAP
• VPN
User Configuration
Security
Device Management
Apple's Version
Device Settings
Restrictions
• WiFi
• Web,YouTube, App Store
• Passcode
• Camera, FaceTime, iCloud
• Web Clips
• Content Ratings
• Exchange
• APN
• LDAP
• SCEP
• VPN
• x.509 Certificates
User Configuration
Security
iPhone Configuration Utility
Enterprise Management
MDM Platform
iPhone
Configuration
Utility
Security
Auditing
VPP
Management
MDM Limitations
‣
Users can delete MDM profile
‣
Device can be wiped
‣
No REAL app management
‣
Cost
JAMF Casper Suite
Custom MDM Solution
Meraki
LCISD
MDM
WordPress
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki Limitations
‣
Hosted (can be a philosophical limit)
‣
No Directory Services Support (LDAP)
‣
Cost
WordPress
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
Tagging
Content Management
iTunes
1
Personal
2
Group
3
VPP
Account Types
1
Personal
2
Group
3
VPP
Account Types
1
2
Personal
Group
‣What
everyone uses
‣Sync
multiple PERSONAL
devices
‣Can
purchase apps
‣iTunes
3
VPP
is built around this
Account Types
1
2
3
Personal
Group
VPP
‣Sync
multiple devices
‣Can't
pay for apps
Account Types
1
2
Personal
Group
‣Apple's
answer to enterprises
‣Difficult
to manage
‣FULL
‣All
3
VPP
OF HOLES
we have...
Apple Volume Purchase
Program
Program
Manager
Program
Facilitators
End
Users
Enterprise Management
Content Management
Device Management
Apps
User Content
Policy
Security
Enterprise Management
Apps
User Content
Policy
Security
Device Management
Content Management
Holy Grail???
Device Management
MDM Platform
Content Management
Volume Purchase Program
Holes
What Works
‣Districts
‣Tax
can ATTEMPT to comply
Free
‣Volume
Discounts
‣Purchases
are still treated as
consumables
‣Purchases
are NOT linked to an
account
‣Not
purpose built
MDM VPP Management
MDM VPP Management
MDM VPP Management
MDM VPP Management
iCafe Approach
‣
Link the Apple VPP
process with district
processes
‣
Manage programs not
devices
‣
Enable a small number
of people to manage
thousands of apps
‣
Maintain ownership of
app purchases
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
A Hybrid Approach
Group
MDM/Wordpress
iPad
Personal
VPP/Wordpress
Question
s
you
Thank
.
Chris Nilsson
[email protected]
g
@chrisnilsso
n