We have 1 Apple ID and we have been using Meraki to push applications to the devices, BUT we dont want Teachers and Students to be able to install Apps from the App Store.

But when we push out an app using Meraki the end user has to type in the Apple ID password, and for obvious reasons, we dont give this out to anyone.

Any solution, or this another apple driven thing so they can control the world?