Most efficient way to set up ~200 iPads

[realtnt]

Hi everyone,

 

I'm in the process of setting up around 200 iPads for staff and pupils.

 

TL;DR In Apple Configurator, when I'm restoring a 'Master iPad' to a new set of devices, the apps installed are linked to the master iPad's AppleID and I can't update them (after I change the AppleID of each device) without first putting in the Master iPad's AppleID password.

 

 

Read on to see what I've done so far.

 

- I have created separate AppleIDs for each device - in fact I created more AppleIDs than we'll ever need for the foreseeable future so we don't have to be white-listed again, etc (using a script to automate the creation and verification)

- I have set up VPP, added apps (only free for the time being and in the process of getting Apple to grant me the free licenses for eligible devices for GarageBand, Numbers, Keynote, etc)

- I have set up Meraki and added the managed devices (again via a script for the verification)

 

I have also prepared and supervised some iPads for testing and here's where I'm having some issues.

 

In Apple Configurator I have set up a custom wallpaper, our wifi, the Meraki enrollment profile and a few restrictions and that all worked fine. I was able to push out apps via Meraki and they were silently installed to the supervised iPads.

 

When I was doing some reading up about how to deploy the iPads, I found a lot of instructions on how I can set up a 'master' iPad and have that restored to each new iPad with a core set of apps, folders, etc

 

The first time I did it, I didn't realise that all the apps were 'stripped' before restoring the iPads, so in effect I had 'blank' iPads. After some more reading I found that I had to get the .ipa files, and add the apps to the Configurator; which I did.

 

I then restored a bunch of iPads. These iPads were all logged in with the 'master' iPads AppleID.

 

I logged them out and logged in with a different AppleID on each one.

 

The problem is that those apps are linked to the 'master' iPad's AppleID and when I try to update them from the AppStore it asks me for that AppleID's password.

 

So, what am I doing wrong?

 

Also, is there an easier/faster way of deploying the iPads with separate emails and AppleIDs - or am I asking too much of Apple?

 

 

Thanks

 

Edit: Just to say that this is not a 1-2-1 deployment. We're a 2 (going to 3) form entry primary school and we'll be deploying roughly about 20 iPads per yeargroup.

Edited January 6, 2015 by realtnt

[andyheth]

Hi,

 

Last October Apple introduced Zero Touch Enrolment (https://www.apple.com/education/docs/DEP_Guide.pdf) if you purchased the iPads since then you should have been offered this via the reseller - the iPads would then be configured with all the Apple accounts and relevant Apps that you specify and the individual end user E-Mail addresses prior to being shipped to you.

 

If you haven't opened them all up yet then maybe you can ask your reseller to do this for you?

 

HTH

 

Andy

[Brimstone]

Hi,

 

Last October Apple introduced Zero Touch Enrolment (https://www.apple.com/education/docs/DEP_Guide.pdf) if you purchased the iPads since then you should have been offered this via the reseller - the iPads would then be configured with all the Apple accounts and relevant Apps that you specify and the individual end user E-Mail addresses prior to being shipped to you.

 

If you haven't opened them all up yet then maybe you can ask your reseller to do this for you?

 

HTH

 

Andy

 

Unless you bought these direct from Apple DEP is NOT live as yet in the UK, if you bought from a reseller then you will to wait until portals are set up so resellers can give you their ID.

 

If you are using "the master iPad" in Configurator to push apps to the iPads, then yes the only way to update these apps is by signing in with the "master iPad" Apple ID. Apps in Configurator are NOT part of the back up, they are synced at the end of the restore process.

 

What you need to use is "Managed Distribution".

 

Each iPad needs it's own unique Apple ID and you need to download a token from your VPP account portal

Paste that into your Meraki MDM.

Invite users into the Managed Distribution System, they have to accept this invite

Push Managed Distribution Licenced Apps out to users

(iPads must be supervised and iTunes content ratings turned off for silent installation of apps)

[realtnt]

@andyheth We got our iPads before October and through an Apple reseller.

@Brimstone Right... sorry for being thick. I'm a bit unclear about a couple of things.

 

I have done all the work with VPP and Meraki, I've invited (and accepted) all my users, etc and I've added a number of apps in Meraki and pushed them to iPads.

 

One question is how do I turn off iTunes content ratings? I looked at the restrictions and there's a setting for which country's content ratings to use. Is it something in there?

 

Also, (although I'm testing that out now) if I don't restore a 'Master iPad' and just add a number of apps via the Configurator, will they be linked to the AppleID I used to download them in the first place?

 

Finally, is there a better way of adding email accounts and/or AppleIDs to the new iPads other than doing it manually?

 

Thanks

[Brimstone]

@andyheth We got our iPads before October and through an Apple reseller.

@Brimstone Right... sorry for being thick. I'm a bit unclear about a couple of things.

 

I have done all the work with VPP and Meraki, I've invited (and accepted) all my users, etc and I've added a number of apps in Meraki and pushed them to iPads.

 

One question is how do I turn off iTunes content ratings? I looked at the restrictions and there's a setting for which country's content ratings to use. Is it something in there?

 

Also, (although I'm testing that out now) if I don't restore a 'Master iPad' and just add a number of apps via the Configurator, will they be linked to the AppleID I used to download them in the first place?

 

Finally, is there a better way of adding email accounts and/or AppleIDs to the new iPads other than doing it manually?

 

Thanks

 

In restrictions in Configurator if you don't change anything, just "allow all" for movies, TV Shows and Apps you can set the country, this will not affect silent install of apps.

 

If you are using Apple Configurator, email accounts have to be added manually, however if you omit user info such as username, password, SMTP Server address a user will be prompted for this info when they install the profile. If you use a cheap MDM such as Profile Manger you can add payload variables when enrolling devices

[biz]

@andyheth We got our iPads before October and through an Apple reseller.

@Brimstone Right... sorry for being thick. I'm a bit unclear about a couple of things.

 

I have done all the work with VPP and Meraki, I've invited (and accepted) all my users, etc and I've added a number of apps in Meraki and pushed them to iPads.

 

One question is how do I turn off iTunes content ratings? I looked at the restrictions and there's a setting for which country's content ratings to use. Is it something in there?

 

In Meraki, just underneath where you choose which country's ratings to use, there are three Allowed content ratings fields (Movies, TV Shows and Apps). The apps field must be set to Allow all apps for silent installs.

[realtnt]

Excellent! Thanks!