[iPad] Deploy configurations, apps etc. via WiFi

[LegacyPulsar]

Good day, all!

 

I currently manage about 40 iPads in a school and have recently discovered the 'delight' that is Apple Configurator 2. I say 'delight' because it is anything but. HOWEVER, I have managed to wrestle it in to something that conforms to what I want it to do (deploy custom blueprints, deploy profiles) but I need to connect the iPads the iMac that runs both MacOS Server and AC2 via USB cable. It's awfully messy, and we recently opened a second site a few miles which shares a network connection via an EAD line and has their own set of iPads - getting them back to my office on the main site is a pain, so I'd like to investigate an over-the-air solution but have no idea where on earth to start, and which MDM solutions even offer that kind of facility, or if that can be added into AC2 (as I know it asks about MDM servers during device preparation).

 

iPads are spread out across the school site, one per classroom. There is no requirement for them to be using the Classroom App or separate users as we are a special needs school, so just a device set up to a uniform standard with restrictions in place for locking down device functions is all that's needed and all they've got.

 

Now, I'm a self-taught newbie in the Apple ecosphere.: to be fair I'm not at all keen on them from a management perspective, but as the school made a significant financial investment in them before my time I'm duty-bound to facilitate the continuation of their use. I also have the issue where the Apple ID the school is using and previously purchased all their apps on is a standard iTunes Apple ID: NOT a VPP one, which means I basically have one license for the apps that these iPads are all sharing.

 

I've not run into any issue yet with the 10-device limit on standard IDs: all the apps open without issue across all devices.

 

So basically my questions are as follows:

 

1) Over-the-air deployment. Can it be done using just AC2 or does it require a third-party solution

2) If a third party solution, which is the best to use? I've seen there is another topic covering this, but having glanced through it I still find myself somewhat clueless when it comes to the jargon

3) Will I run into problems with an over-the-air system using an iTunes Store Apple ID, i.e. will it deploy an app to a single iPad and then stop dead?

 

Many thanks in advance to any who answer this!!

[dloudon96]

I would have a look at purchasing Apple OS X server, you could you a MacBook, it’s around £19.99 you join the Mac to the domain, and use profile manager and assign all your iPads to the server and then you can push out apps over the air.

 

Let me know if you need any help.

[LegacyPulsar]

Thank you!! I do have MacOS server already on the same Mac that runs AC2 (I purchased it for the caching aspect, which six months later was then annoyingly rolled into the core OS for free...): I've noticed you can deploy profiles using it, but wasn't aware I could use that to also control app deployment over the air

 

Are there any good guides around to get started with that?

[dloudon96]

No problem, what WiFi system do you have in place?

[LegacyPulsar]

We have a password-protected SSID in place powered by ubiquiti access points that all school devices currently access if permitted: currently the iPads accept a profile that have the WiFi credentials embedded in it as part of their default blueprint.

[Brimstone]

a) If you are using a single iTunes account then you are effectively breaking licencing rules, you should be using a VPP account. As every iPad is using the same Apple ID it can also be a security risk.

b) All MDM's only work with a VPP account

c) AC2 on it's own can not distribute content over the air to devices, but AC2 can be used with an MDM solution to first Supervise and then enrol devices into your MDM solution.

 

I know everyone is different but I find it strange you are a special needs school and you are not interested in Apple Classroom...? I have at least 15 special needs schools whose teachers love Apple Classroom being able to help students get to the right app, send them web links etc.

[LegacyPulsar]

We are quite low-tech and, unfortunately, the teachers are quite ICT-reluctant. As we only have one device per classroom (so no teacher device) and no budget to expand this even if I wanted to, the need for Classroom just isn't there, and the option of rolling out multiple devices to a class isn't a practical option due to the range of MLD and PMLD and behavioural issues within each learning environment. I do keep a number of loan devices in the office if they wanted to do larger group work sessions, but this is a rare scenario.

 

Completely appreciate that your answer to 1) is what it is, and that is quite a hurdle that I have to overcome that I've been left by the old manager: transfering and updating those purchases to reflect the number of devices we have. What fun!

[dloudon96]

I’ll see if I can find the ports online that you’ll needs to allow on your WiFi controller.

[Brimstone]

We are quite low-tech and, unfortunately, the teachers are quite ICT-reluctant. As we only have one device per classroom (so no teacher device) and no budget to expand this even if I wanted to, the need for Classroom just isn't there, and the option of rolling out multiple devices to a class isn't a practical option due to the range of MLD and PMLD and behavioural issues within each learning environment. I do keep a number of loan devices in the office if they wanted to do larger group work sessions, but this is a rare scenario.

 

Completely appreciate that your answer to 1) is what it is, and that is quite a hurdle that I have to overcome that I've been left by the old manager: transfering and updating those purchases to reflect the number of devices we have. What fun!

 

If you have never used VPP before, it's a fairly easy process, you can start this enrolment process at;

https://school.apple.com

 

 

[MicrodigitUK]

Have you looked at https://www.groundctl.com it is basically an advanced version of Configurator that is cloud based. So it dose have an annual per device cost, but well worth it. Perfect for multi site and allowing quick reset via USB.

[XiJ]

We tend to use meraki systems manager. It’s saved so much time for everybody when it comes to pushing out settings and apps etc. It’s about £5 per device per year. It will save you so much more than that on management and deployment time.

 

1. Supervise devices jawing AC2

2. Install meraki enrolment profile (via AC2 or individually)

3. Sit back and admire your work (or spend time fixing something else)

 

Sign up for VPP and get an Mdm !

[toffee_paul]

I shifted our iPad management and config from Configurator (awful) to Configurator 2 (again, awful) to, finally, Meraki Systems Manager. Couldn't go back after using Meraki it's quite simply a much better way. Initially all our devices were enrolled in an earlier version of Systems Manager which offered enrollment of unlimited devices but we switched to the new interface which continues to be free but only for the first 100 enrolled devices. This was a while back so things might have changed since. Integrates very well with VPP and DEP.

[Brimstone]

I shifted our iPad management and config from Configurator (awful) to Configurator 2 (again, awful) to, finally, Meraki Systems Manager. Couldn't go back after using Meraki it's quite simply a much better way. Initially all our devices were enrolled in an earlier version of Systems Manager which offered enrollment of unlimited devices but we switched to the new interface which continues to be free but only for the first 100 enrolled devices. This was a while back so things might have changed since. Integrates very well with VPP and DEP.

This might be good for you but Meraki is not no longer free and there are far better MDM's out there...

[toffee_paul]

This might be good for you but Meraki is not no longer free and there are far better MDM's out there...

Excellent! Not often that I get in there before they pull the free stuff [emoji41] .

[AlanD]

Apple’s own MDM, confusingly called “profile manager” is probably the way to go. I’m told it works ...and it’s free. No it probably doesn’t have all the bells and whistles of other MDM solutions like Meraki...which by the way is no longer free at all...or at least not for new implementations. We use configuration 2...which I have described as the worst piece of software ever....and I’ve seen a fair amount of rubbish. It’s fine for a clean install but as soon as you have a mixed bag of iPad connected up...well you will probably decide it’s easier to wipe everything and reinstall...which apart from anything else might take 2 days to complete. I keep meaning to set up profile manager..but I always end up in some cul de sac with some problem or other.

[kidpressingbuttons]

Check out mosyle. It’s free and works brilliantly! Ditched Apple configurator as it became buggy with the latest releases

[Brimstone]

Apple’s own MDM, confusingly called “profile manager” is probably the way to go. I’m told it works ...and it’s free. No it probably doesn’t have all the bells and whistles of other MDM solutions like Meraki...which by the way is no longer free at all...or at least not for new implementations. We use configuration 2...which I have described as the worst piece of software ever....and I’ve seen a fair amount of rubbish. It’s fine for a clean install but as soon as you have a mixed bag of iPad connected up...well you will probably decide it’s easier to wipe everything and reinstall...which apart from anything else might take 2 days to complete. I keep meaning to set up profile manager..but I always end up in some cul de sac with some problem or other.

PM is not free *sighs*

 

And it's not much better for large scale deployments of iPads than AC2 Apple don't use this themselves, they use https://www.jamf.com