Shared iPads management

[iMangles]

I know this comes up a lot but I'm having some trouble getting my head around it.

 

This is a primary school with less than 100 iPad 2's throughout. Each classroom has 10-30 iPads shared between the students. No 1-1 iPads.

 

Currently, all are just under 1 apple ID and teachers buy apps as they wish and I reset them every year / as required.

This was fine when there were 20-30 iPads, but isn't so great anymore. So need to sort out a better management system, ideally one that is free at this stage.

 

Teachers like being able to buy apps, but want them to sync automatically to all devices in their classroom. I want to be able to manage settings centrally and push updates/apps as required.

The fact that teachers like to manage the apps themselves is the main reason I haven't moved to an MDM as it seemed like I would need to manage app distribution centrally using VPP and something like Meraki. Is this correct or is there a reasonably non technical way teachers could continue to manage this themselves?

 

One classroom is soon to have around 40 iPads in it, so I need to figure out the best solution to manage this once that happens.

I enrolled with Apple School Manager, but this appears to be suited to 1-1 iPads? I don't want students to have to login or do anything like that.

Shared iPad is not compatible with iPad 2?

Which, I think, leaves a AC2/Meraki combo. Does that sound right?

 

Any prods in the right direction here would be greatly appreciated!

[XiJ]

I would say you definitely need AC2 to supervise then get them on the free Meraki. (Unless you're going to have > 100 devices soon). Sign up for the VPP.

 

The trouble you might have is that if they've purchased lots of apps they should now be licensing per device.

 

It's made a huge difference to managing for me though. I can quickly deploy - and manage - apps to all devices. School get a list of purchased apps and invoices which is much easier for auditing etc.

[maxrebo]

We use AC2 and Meraki (Free version).

The problem we have now is Apple ID`s, we used to use one for all. Staff Ipads that go home isnt much of a problem as they use their own but pupil ipads how do people manage this?

[biz]

We use AC2 and Meraki (Free version).

The problem we have now is Apple ID`s, we used to use one for all. Staff Ipads that go home isnt much of a problem as they use their own but pupil ipads how do people manage this?

 

Our pupil iPads don't have Apple IDs signed in. With supervision, Meraki and VPP apps are assigned to the device, rather than to an Apple ID which was the only option previously.

[Brimstone]

If you have teachers that are already using their own personal Apple ID then here is the solution for you.

 

Existing users with Personal Apple ID's

Sign up for an MDM, I would not go near Meraki as this seems full of holes at present and likely to not be free any longer. Users with an existing Apple ID can still sign into this and download the apps they have purchased after you have supervised them using AC2 or signed up for DEP and reset them. User with a personal Apple ID can then be invited into Managed Distribution, they get an invite which they accept. Now you can push apps to them via Meraki but also revoke them as well. New users don't require an Apple ID and you can device assign apps to these users.

 

Apple School Manager, is NOT for 1:1 only it's designed to let you buy VPP Content and push out via your MDM, manage your device in DEP, and add people if you are created Managed Apple ID's for students for shared iPad or iTunes U.

[iMangles]

Teachers all use their own Apple ID and buy their own apps which is fine. I probably don't want to mess with that right now.

 

With Apple School Manager, when I look at it, all I'm seeing is a way to create Managed Apple ID's that would be linked to each student. As far as I can tell, a student would pick up and iPad and pick their account and login with their ID. Is this not the case? Can I manage devices through Apple School Manager without using ID's?

 

 

Also, If I setup an iPad with AC2 then push apps with an MDM like Meraki, I never need to login with an Apple ID right? However If I do login with an Apple ID a teacher could also still buy an app to try on the ipad as a once off thing, then If they want to push it to all iPads we do that through a VPP and MDM?

[Brimstone]

Apple School Manager is NOT for managing devices, it does 3 things.

 

Allows you to buy VPP content, this content to then pushed to your MDM solution

Manage your devices via DEP

Upload or create users in Apple School Manager, the reason you do this is to;

 

Created a Managed Apple ID for shared iPad or iTunes U only, users can not buy content using this Apple ID and you can not push content to these Managed Apple ID either so you still push content to them via device assignment using your MDM.

 

Yes teachers can still sign in with their Apple ID to devices managed via your MDM.

[iMangles]

OK right, I think I have some more reading to do to understand all of this correctly, but I'm getting there.

 

So in Apple School Manager I can generally ignore the PEOPLE section if I want to and just use it for its DEVICES and CONTENT sections, to manage DEP devices and volume purchase software respectively?

 

I think I'm not quite getting DEP as I have only just encountered it in the last week. I need to speak to whoever the school bought each particular iPad off to get the device enrolled in this? They were bought in bits and pieces over the last 5 years and then mixed together throughout the school. I don't know how this is going to be possible for the existing devices we have. It should be fine for the new devices incoming I suppose.

[Zoom7000]

I would not go near Meraki as this seems full of holes at present and likely to not be free any longer.

 

Do you have any evidence to backup this statement? What holes are present? I've successfully commissioned iPads at 2 schools and frankly put, I think Meraki have just got better with MDM as iOS has matured and enabled more MDM features.

 

Also, people have been saying since iOS 8 that Meraki was gonna stop being free for under 100 devices, yet, it's still free as of iOS 10 and Meraki (AFAIK) have never announced any plans to change the free option.

[iMangles]

If I use AC2 to setup, VPP to purchase software and Meraki as MDM, do I need to do anything with DEP?

[biz]

If I use AC2 to setup, VPP to purchase software and Meraki as MDM, do I need to do anything with DEP?

 

Correct, you can use either AC2 or DEP to supervise the devices.

[simonw]

Is the anywhere in AC2 to set the Apple ID? I've prepared and applied Blueprints for WiFi, Restrictions and Apps, everything has gone fine until I try to access the App Store. I'm asked for the Apple ID, but I keep getting a Verification Error on the Apple ID Server.

[Brimstone]

Do you have any evidence to backup this statement? What holes are present? I've successfully commissioned iPads at 2 schools and frankly put, I think Meraki have just got better with MDM as iOS has matured and enabled more MDM features.

 

Also, people have been saying since iOS 8 that Meraki was gonna stop being free for under 100 devices, yet, it's still free as of iOS 10 and Meraki (AFAIK) have never announced any plans to change the free option.

It's not free anymore......

 

http://www.edugeek.net/forums/netbooks-pda-phones/159967-meraki-mdm-free-vs-enterprise-paid-3.html

[Brimstone]

Correct, you can use either AC2 or DEP to supervise the devices.

 

 

Whilst devices are Supervised, the MDM profiles when using AC2 are removable by end users, when you use DEP they are not.

[Guest MD5T]

Dont use AC and meraki only stick with one as this can cause conflicts

[Blue_Cookeh]

Dont use AC and meraki only stick with one as this can cause conflicts

 

Really? We've deployed using AC2 supervision and Meraki MDM for the past few years

[iMangles]

So assuming I am unable to enrol in DEP, it sounds like I am left with AC2 + MDM of choice?

 

Thoughts on setting up a mac mini server with profile manager? Can this perform the same functions as Meraki?

[iMangles]

OK, so I have made some progress, however I'm still unsure of a few things.

 

I have the 52 iPads.

I have them enrolled in DEP and the order has appeared in Apple School Manager.

I have a Meraki Systems Manager account which I linked to Apple School Manager as the MDM.

 

All 52 iPads appeared in Meraki under the DEP section. About half with an orange Assigned tag, and about half with a grey Empty tag, for some reason.

 

Now the, questions:

 

1. Anyone know why some are Assigned and some are Empty in Meraki? Does this matter?

 

2. I only need to use Configurator if I want to push wifi settings, so I don't have to enter them manually?

The DEP process should take care of any other setup as the device seeks out any MDM assigned to its serial number?

 

3. To volume purchase apps, I go to the Apple School Manager Content -> Buy Apps and Books section and follow that process?

 

4. I can create Managed Apple ID's with Apple School Manager with privileges to allow other people to also login to Apple School Manager and purchase apps?

 

5. Will the purchased apps appear in Meraki and I can choose which devices to assign them to? Like I can have 50 iPads assigned a Grade 1/2 tag and push apps to any device with that tag?

 

6. I tested preparing an iPad with Configurator, booted it up after the process and it asked for an Apple ID and password once it got to the home screen. Is this just asking for the Meraki login ID and password? Or is this an ID to purchase apps with?

 

I think that covers it for now. Mostly just want to confirm I understand the process or if I'm missing something

 

Thanks!

[biz]

 

1. Anyone know why some are Assigned and some are Empty in Meraki? Does this matter?

 

 

On the DEP page in Meraki did you apply your settings to all devices, or just the first page? I've missed a load before, because it defaults to 15 or 30 per page.

 

2. I only need to use Configurator if I want to push wifi settings, so I don't have to enter them manually?

The DEP process should take care of any other setup as the device seeks out any MDM assigned to its serial number?

 

Correct. I have used Configurator in the past, but now with DEP I don't worry. Most of the iOS activation pages can be skipped and hidden, so setting them up is just tapping in the wireless key and turning on location services (I believe the default is 'off' if you skip it, which will stop Meraki from getting the devices' locations).

 

3. To volume purchase apps, I go to the Apple School Manager Content -> Buy Apps and Books section and follow that process?

 

Also correct. You need to upload your VPP Token to Meraki on the Organisation > MDM page and then will be able to see your synced licenses on the Systems Manager > MDM > VPP page.

 

4. I can create Managed Apple ID's with Apple School Manager with privileges to allow other people to also login to Apple School Manager and purchase apps?

 

Yes you can, the role is called Content Manger. They will only see the VPP store when they log in to ASM and not the People or Devices sections.

 

5. Will the purchased apps appear in Meraki and I can choose which devices to assign them to? Like I can have 50 iPads assigned a Grade 1/2 tag and push apps to any device with that tag?

 

Synced licenses appear in Systems Manager > MDM > VPP page, you will then have to manually add the app again to the Systems Manager > Apps page and assign the apps to a tag. You can create a new tag if you wish to assign the apps to a sub-set of a larger tag, it all becomes very Venn-diagram-y! My number one feature-wish for Meraki is that the apps page would sync with the VPP licenses, but as yet it does not.

 

 

6. I tested preparing an iPad with Configurator, booted it up after the process and it asked for an Apple ID and password once it got to the home screen. Is this just asking for the Meraki login ID and password? Or is this an ID to purchase apps with?

 

I think that covers it for now. Mostly just want to confirm I understand the process or if I'm missing something

 

Thanks!

 

It is asking you for an actual Apple ID, as Apple like their devices to be signed in at all times, but you can ignore it. You'll be asked to sign in when you try and assign an app that isn't VPP licensed (so the iPad can go to the App Store and download it itself) and sometime even when you have! I've found the biggest culprit for this is actually Meraki's own app, so I've stopped assigning it now!

 

Hope that helps

[iMangles]

Oh thanks so much biz, that really helps a lot. That clears everything up for me perfectly!

 

Also, you were right, I totally just assigned settings to the first page only. Was having a bit of a hectic day!

Edited December 4, 2016 by iMangles