[ipad] What is your iPad app deployment solution?

[DB91]

Right, one of the projects I have been assigned is getting a working solution to deploy apps and settings to iPads connected to the WIFI network, also managing iOS updates effectively, most iPad cabinets across the schools we manage have all different versions, and not a standard oneOnce set up correctly, this will be set up at all the schools under our support, as at the moment, deploying apps is just not working and we are most of time manually doing itI have set up Meraki at one of the schools, this is working great - I can deploy apps, set up profiles with certain restrictions, push out home screen URL shortcutsDo you use anything else instead of Meraki to do this? I'm also interested for those that use Meraki in what else do you use it for to do with iPads?To deploy iOS updates is the answer Apple Configurator? We have an iMac with this already installed, it was set up before I started, so my plan is to start from scratch with this project I'm hoping to get to BETT to discuss different solutions too, but I thought this would be a good start to get ideas and feedback fromAppreciate any responses!Dan

[DGardiner]

Right, one of the projects I have been assigned is getting a working solution to deploy apps and settings to iPads connected to the WIFI network, also managing iOS updates effectively, most iPad cabinets across the schools we manage have all different versions, and not a standard oneOnce set up correctly, this will be set up at all the schools under our support, as at the moment, deploying apps is just not working and we are most of time manually doing itI have set up Meraki at one of the schools, this is working great - I can deploy apps, set up profiles with certain restrictions, push out home screen URL shortcutsDo you use anything else instead of Meraki to do this? I'm also interested for those that use Meraki in what else do you use it for to do with iPads?To deploy iOS updates is the answer Apple Configurator? We have an iMac with this already installed, it was set up before I started, so my plan is to start from scratch with this project I'm hoping to get to BETT to discuss different solutions too, but I thought this would be a good start to get ideas and feedback fromAppreciate any responses!Dan

 

Any service which supports iOS 9.3+ device assigned app deployment will remove your headaches overnight... the free edition of meraki doesnt support this.

 

If you have DEP you can enforce iOS OS updates OTA from MDM

 

i use light speed mobile device manager and both of the above work no problem but costs about £4.50 per device per year.

[tmoon-mint]

Here is how I manage mine.

 

1. Setup and supervise the device using AC2 (If not using DEP)

2. Setup Meraki account and upload token from the schools Volume Purchase Programme acount.

3. Purchase all apps required via the VPP store. This includes free ones.

4. Deploy them from Meraki using device assignment. This removes the requirement for Apple IDs.

5. If using DEP iOS updates can be managed via Meraki. If not using DEP I just go round and do the updates as and when required.

[DB91]

Thank you both, so if the iPads are on iOS 9.3 or higher, the free edition of Meraki won't work in deploying apps?

[mikeyd101]

We use Jamf Pro / casper suite for our macs, but it can also manage ipads. We are starting to implement ipads in our elementary and are looking at expanding our management.

[Arreks]

Any service which supports iOS 9.3+ device assigned app deployment will remove your headaches overnight... the free edition of meraki doesnt support this.

We're on iOS 10 and deploying apps via Meraki (VPP) still works for me.

[Guest MD5T]

DEP + Meraki here nightmare to setup

[DGardiner]

We're on iOS 10 and deploying apps via Meraki (VPP) still works for me.

 

the free edition can deploy apps fine as it has for years, but they require an apple account on each device as the apps are deployed to apple IDs.

the paid edition/other services can assign the apps directly to the iPad - removes all the headache of kids logging in/out of apple account making deployments become a bit more manual task

 

IOS 9.3 was when device assignment was introduced as an option

[tmoon-mint]

I am using the free version of Meraki and use device assignment without any issues.

[Griff]

Used to use Meraki then we hit the 100 limit so had to pay for a solution went with Lightspeed in the end and use DEP absolute dream.

[sidewinder]

Used to use Meraki then we hit the 100 limit so had to pay for a solution went with Lightspeed in the end and use DEP absolute dream.

 

Would you be able to give a ballpark figure of costs?

[Griff]

Would you be able to give a ballpark figure of costs?

 

Lightspeed costs us £550 per year we have about 110 iPads they charge per device

 

Meraki quoted us at £6,600 for 5 years so £1,320 per year but I think we had to do all 5 years

 

Casper quoted us £1,600 first year and £650 per year after that

 

This was in 2015 pricing has probably changed.

[DGardiner]

I am using the free version of Meraki and use device assignment without any issues.

 

Really? the update did say that device assignment was a "paid" feature - that was when i moved

[tmoon-mint]

Really? the update did say that device assignment was a "paid" feature - that was when i moved

 

Yep really!

 

 

[sparkeh]

Really? the update did say that device assignment was a "paid" feature - that was when i moved

 

We use device assignment from Meraki free version.

Meraki website states that the unlicensed free version (for up to 100 clients) is fully featured. https://documentation.meraki.com/zGeneral_Administration/Licensing/Systems_Manager_Licensing

[fredbayker]

Using DEP and device assignment with meraki. Works just fine. Only issue is the 100 device limit on the free licence.

 

Device licensing was introduced with ios 9.

Other features such as home screen config and wallpaper were added with 9.3.

Edited November 12, 2016 by fredbayker

[Jehanzeb]

I enrolled our Year 6 iPad Mini on DEP and sync them with Meraki (legacy version) not knowing legacy version does not support Device assignment. I have to rely on Apple IDs which I have to create one by one for 60 odd students before Sept every year. It's so time consuming. I think Paid version is the way to go but until then will have to do things manually. ASM is annoying as well, I created managed Apple IDs but offcourse under Student profile none of the apps get pushed onto iPads and the error comes up You have no permission to buy apps.

 

Regards

 

J.

[sparkeh]

I enrolled our Year 6 iPad Mini on DEP and sync them with Meraki (legacy version) not knowing legacy version does not support Device assignment. I have to rely on Apple IDs which I have to create one by one for 60 odd students before Sept every year. It's so time consuming. I think Paid version is the way to go but until then will have to do things manually. ASM is annoying as well, I created managed Apple IDs but offcourse under Student profile none of the apps get pushed onto iPads and the error comes up You have no permission to buy apps.

 

Regards

 

J.

Do you mean the free version? We have that and can assign apps to devices with no problem.

[Jehanzeb]

Do you mean the free version? We have that and can assign apps to devices with no problem.

 

Do you have the 100 device limit Meraki Systems Manager? We have an earlier version. I can bring the DEP devices into Systems Manager but cannot allocate any apps as there is no option to do so under Meraki--->Apps.

 

Ideally I would like the zero touch non Apple ID device enrollment system, which I know, is only possible with paid version of any MDM. The biggest challenge is not setting up iPads with AC and enrolling onto Meraki but to setup Apple IDs and then making (and hoping) Apple to whitelist them so that we do not have to enter any CC/DB/PaylPal etc. There is no "none" option available anymore if you create apple IDs from AppleID.apple.com - Moreover when you run Review under iTunes, whether you click account or (to some) Redeem, it does not give a "None" option under Payment.

 

To me Apple should allow Schools to create Apple IDs and those IDs should be used to push apps or perhaps allow Schools to register with Apple and whitelist their domain or something. This would allow Schools to push apps and restrictions without any issues. (Managed IDs are not the same as what I mentioned earlier)

 

Kindest regards

 

J.

[Accura2k7]

We're using Lightspeed MDM.... works well, no real issues

[sparkeh]

Do you have the 100 device limit Meraki Systems Manager?

Yes we do. Sorry I didn't realise that there was another version, I thought it was the 100 device free version and the paid option.

[Jehanzeb]

Yes we do. Sorry I didn't realise that there was another version, I thought it was the 100 device free version and the paid option.

Prior to 100 device restriction there was one with no restrictions whatsoever on number of devices however when the demand increased, Meraki chose to offer a paid version (further development on paid version only) and later redesigned the free version with 100 device restriction policy - they did not force customers out from the legacy system nor discontinued it, which is where we lie.

 

Kindest regards

 

J.

[Brimstone]

Do you have the 100 device limit Meraki Systems Manager? We have an earlier version. I can bring the DEP devices into Systems Manager but cannot allocate any apps as there is no option to do so under Meraki--->Apps.

 

Ideally I would like the zero touch non Apple ID device enrollment system, which I know, is only possible with paid version of any MDM. The biggest challenge is not setting up iPads with AC and enrolling onto Meraki but to setup Apple IDs and then making (and hoping) Apple to whitelist them so that we do not have to enter any CC/DB/PaylPal etc. There is no "none" option available anymore if you create apple IDs from AppleID.apple.com - Moreover when you run Review under iTunes, whether you click account or (to some) Redeem, it does not give a "None" option under Payment.

 

To me Apple should allow Schools to create Apple IDs and those IDs should be used to push apps or perhaps allow Schools to register with Apple and whitelist their domain or something. This would allow Schools to push apps and restrictions without any issues. (Managed IDs are not the same as what I mentioned earlier)

 

Kindest regards

 

J.

 

Point 1. Using appleid.apple.com is NOT and has never been the recommended way to create Apple ID's without any payment options, you have to buy a free app within iTunes without being logged in and then create the account at the end of this process with the payment set to none.

Point 2. Apple Whitelisting was there to stop your school being blacklisted from creating multiple Apple ID's and has nothing to do with making you attach payment credentials. If you try and create multiple Apple ID's without their knowledge then you are likely to get blacklisted.

[Jehanzeb]

Point 1. Using appleid.apple.com is NOT and has never been the recommended way to create Apple ID's without any payment options, you have to buy a free app within iTunes without being logged in and then create the account at the end of this process with the payment set to none.

Point 2. Apple Whitelisting was there to stop your school being blacklisted from creating multiple Apple ID's and has nothing to do with making you attach payment credentials. If you try and create multiple Apple ID's without their knowledge then you are likely to get blacklisted.

 

Thank you Brimstone, both point noted and were somewhat known. I know for a fact that I created previous Apple IDs with appleid.apple.com and had none option, so not sure if the first point is correct in its entirety or maybe I got lucky last two years. I agree, reading my previous post comment, it seems like I am relating the payment option with whitelisting, it certainly not the case, what I meant to say above was a suggestion to put Schools registered domains onto whitelisting so schools can setup Apple IDs without any issues of blacklisting and also provide simpler registering methods. Something similar to managed Apple IDs but having an option to push apps as well.

 

Edit: correct me if I am wrong here but Apple also has a tendency to keep Apple IDs regardless of deletion or deactivation if created using Apple School manager (managed Apple IDs). I made a mistake creating a managed Apple ID using our domain name and then realise it never push apps, I then deactivated the ID and deleted it. I no longer able to create the same ID even though it is deleted. I should have created managed ID as [email protected] rather than [email protected]

 

 

Kindest regards

 

J.

Edited August 9, 2017 by Jehanzeb

[Brimstone]

Thank you Brimstone, both point noted and were somewhat known. I know for a fact that I created previous Apple IDs with appleid.apple.com and had none option, so not sure if the first point is correct in its entirety or maybe I got lucky last two years. I agree, reading my previous post comment, it seems like I am relating the payment option with whitelisting, it certainly not the case, what I meant to say above was a suggestion to put Schools registered domains onto whitelisting so schools can setup Apple IDs without any issues of blacklisting and also provide simpler registering methods. Something similar to managed Apple IDs but having an option to push apps as well.

 

Edit: correct me if I am wrong here but Apple also has a tendency to keep Apple IDs regardless of deletion or deactivation if created using Apple School manager (managed Apple IDs). I made a mistake creating a managed Apple ID using our domain name and then realise it never push apps, I then deactivated the ID and deleted it. I no longer able to create the same ID even though it is deleted. I should have created managed ID as [email protected] rather than [email protected]

 

 

Kindest regards

 

J.

Firstly...

 

They may not do this any longer but Apple ran a whitelisting service for school for 30 days to allow you to create personal Apple ID's, I did this last year with schools for thousands of personal Apple ID's. If you are partnered with an ASE I would enquire with them to ask Apple if this service is still available.

 

You have complete control to delete/manage/change/edit over a Managed Apple ID, however as you didn't created this using @appleid.schooldomain.com then you can't create it again. When you upgrade to ASM the most important aspect will be the domain you use for managed Apple ID's. ASM used to make you wait 30 days before you could delete a managed ID but not anymore, you can delete straight away.