[ipad] Which iDevice MDM solution would you use today?

[DJ-1701]

I have been asked if we could disable the News App due to some of the stories displayed. Unfortunately I can not without upgrading or moving to a new MDM (so we can support some iOS 9+ features), so I was wondering what others would recommend today for controlling their iPads?

 

Note: We have around 75 iDevices at present of varying age.

[snagrat]

ZuluDesk

[NB9457]

I'm currently playing with Apple Device Management for Schools and Districts | Mosyle Manager MDM they do a free version too which seems very very good

[synaesthesia]

That looks interesting. Some good comments from other users around t'net too. Cheers @NB9457 will spend a little time playing with that too.

[RTi78]

Mosyle Has been mentioned in another thread too.. which I'm looking into.

[DJ-1701]

Thanks all, and I didn't realise there was another free one about which appears to be up to date.

[tmoon-mint]

Just started looking at Mosyle and it looks very promising so far. Not sure if device assignment through VPP is a premium feature. I haven't found where to do it yet, hopefully it isn't because that would be annoying having to go back to Apple IDs again

[localzuk]

We went with ZuluDesk for the Trust here. Not actually used it much yet - not had time, but we will be migrating all our devices onto it in October.

[DJ-1701]

Hmmmm... As these are both Americain companies, I had a look to see if they participate with the EU-U.S. Privacy Shield, but... I can't find either ZuluDesk nor Mosyle listed. Edited July 18, 2017 by DJ-1701

[localzuk]

ZuluDesk is a company from the Netherlands.

[DJ-1701]

ZuluDesk is a company from the Netherlands.

 

Oh, well in that case then I stand corrected. It looked American from the site.

 

Yeah... it would help if I read to the end of the Privacy Policy...

 

Name of contact : Zulu Education Products BV

Business address : Westerbracht 2, 7821 CH, Emmen, The Netherlands

E-mail : [email protected]

Edited July 18, 2017 by DJ-1701

[DJ-1701]

Pointed out to Mosyle that as an American company they aren't listed under the Privacy Shield for use in EU countries, this was the responce.

 

Hi Daniel,

 

Thanks so much for your interest in learn more about Mosyle Manager! Yes, we are still not listed under the Privacy Shield website for European Countries, but I have forwarded the information brought by you to our legal department, so they can have a look at it for future consideration.

 

In the meantime, you can check out our Privacy Policy at https://manager.mosyle.com/legal/privacy.

 

If you need anything else please don't hesitate to ask. Thanks in advance,

 

Alex Garcia

Partnership Specialist

 

With DPA and also GDPR coming in, I think I will avoid them for now.

[Geoff]

We use Mobile Iron. They are covered by Privacy Shield.

[synaesthesia]

Pointed out to Mosyle that as an American company they aren't listed under the Privacy Shield for use in EU countries, this was the responce.

 

 

 

With DPA and also GDPR coming in, I think I will avoid them for now.

 

How would either of those be an issue please? What data do they store other than something typical for an MDM that wouldn't be covered such as iPad hardware and software details?

[DJ-1701]

How would either of those be an issue please? What data do they store other than something typical for an MDM that wouldn't be covered such as iPad hardware and software details?

 

In this day and age I would ask... why wouldn't you try to cover your back with any online system just in case?

 

I would believe the possiblity of user details, geofencing data and network credentials such as wireless being stored there would be an issue, though it's always best to get a fresh pair of eyes to look at these things... oh wise Tiger @GrumbleDook, what do you think?

[GrumbleDook]

In this day and age I would ask... why wouldn't you try to cover your back with any online system just in case?

 

I would believe the possiblity of user details, geofencing data and network credentials such as wireless being stored there would be an issue, though it's always best to get a fresh pair of eyes to look at these things... oh wise Tiger @GrumbleDook, what do you think?

 

Sorry folks ... cannot comment on this otherwise I would be breaching the forums' advertising rules.

 

Give me a day to clear what I can say.

[localzuk]

How would either of those be an issue please? What data do they store other than something typical for an MDM that wouldn't be covered such as iPad hardware and software details?

Name and email address for users is stored in an MDM if you use account based app distribution.

[synaesthesia]

I've yet to sign up and have a play, would that be necessary do we know? I mean if possible I would be more inclined to use generic accounts as I do currently with Meraki such as staffipads@school, studentyr1@school, negating most of that concern.

I have read briefly about setting up "classes" and individual users etc however I'd want to stray from that, as it's certainly not EU-centric anyway.

[Brimstone]

Pointed out to Mosyle that as an American company they aren't listed under the Privacy Shield for use in EU countries, this was the responce.

 

 

 

 

With DPA and also GDPR coming in, I think I will avoid them for now.

 

**sighs**

 

There is zero student data to be seen, just technical information of hardware and apps being used

[Brimstone]

Name and email address for users is stored in an MDM if you use account based app distribution.

 

It is not stored in the MDM, every MDM knows nothing about the Apple ID being used

[localzuk]

It is not stored in the MDM, every MDM knows nothing about the Apple ID being used

It most certainly is stored in the MDM. Ie. I log in to my MDM solution, and can get a list of the users and their email addresses from it! That info is cached in the MDM.

[DJ-1701]

**sighs**

 

There is zero student data to be seen, just technical information of hardware and apps being used

 

I don't think there is any need for sighing Sheldon Brimstone.

I did state later there is other data that is or could be held which may be seen as sensitive. Would it not be wise to cover oneself?

[swarohi]

I have been experimenting with Meraki free. It seems to be fulfilling all my needs, no pun intended, so might be worth checking it out for you, no pun intended.

[DJ-1701]

I have been experimenting with Meraki free. It seems to be fulfilling all my needs, no pun intended, so might be worth checking it out for you, no pun intended.

 

The free one unfortunately has limited control now, as it was designed for earlier iOS versions. Also in case anyone is looking at this thread in the future, isn't free any more.

 

Meraki do however offer a paid for solution, which supports more features than their free version did.

[synaesthesia]

Indeed the free Meraki has now gone for us, it's just not got what is required such as silent VPP/DEP installs.

And indeed as much as GDPR etc will make the likes of us sigh, it still needs to be taken seriously, hence why I asked why that may be the case. Meraki would certainly be fine but I could certainly see things being hazy if an apple ID can identify a user, whether staff or student and for them to then be geoidentifiable. (is that a word? I like it.)