Apple school manager and Jamf

[Scifigirl]

Hi,

 

We are moving to Apple school manager and Jamf from our other MDM.

 

We have had the training, and anything but one thing was not explained - if we tick the box to sync all our devices (apple school manager) to Jamf will it try and "over write" all the current devices profiles, and data?

 

Might seem a silly question but we would like to stage the deployment so we can weed out any weird ones.

 

Any help much appreciated.

[Brimstone]

Sync data from ASM & MDM only moves one way, from ASM to Jamf MDM, the tick box you mentioned is in Jamf which means ASM can now sync it's data to Jamf.

 

If you change the Classes structure in ASM for example that will change when Jamf syncs to ASM, there are no XML profiles in ASM?

 

Nice to see a Jamf user on here for a change...

[Scifigirl]

Nice to see a Jamf user on here for a change...

 

A real newbie im afraid - does it only sync the data? or does it try to enroll the iPads- thats what i need to know- sorry.

 

We have a very tricky (i think, I may be wrong) set of iPads that will belong to children who take their iPads when they leave and need apple ids attached to them so that funds can be allocated and tracked - i was going to enroll these separately.

 

Trying to decide on a naming convention that we can track for students as we dont want to use names!

 

I was hoping i could use managed IDs for teacher iPads - but im reading conflicting information re these.

[Brimstone]

The easiest way to enrol iPads is using Apple' DEP in Apple School Manager, you give your DEP User ID to the reseller, and they give you their DEP Reseller iD (If they are any good they will have this) They request DEP and when devices are activated they auto enrol into JAMF

 

Do the students own the devices at the end of the scheme, or are they owned by them from the start?

[Scifigirl]

@Brimstone

 

All of our iPads have gone into DEP. Our problem is we had a different deployment method previously (for the last 4 years), and so have iPads out there that cannot auto enroll as data is required from communication apps etc.

 

For some of our looked after students, they own the iPad and it will leave with them, but we also need to show how money is spent on specific apps for them- so im thinking normal apple id with jamf installed as a self enroll for them.

 

Teachers need to be able to make purchases etc .

 

Basically only school owned iPads that are designated to students or specific classes will be in ASM -- i think. I think the rest might have to be handled differently, and then enrolled into Jamf.

[Brimstone]

@Brimstone

 

All of our iPads have gone into DEP. Our problem is we had a different deployment method previously (for the last 4 years), and so have iPads out there that cannot auto enroll as data is required from communication apps etc.

If you have legacy devices that are not enrolled into DEP you can ask the reseller you purchased them from to request DEP for them so they enrol. These iPads will need to be backed up, if the backup being used is iCloud with an Apple ID then when you reset and wipe the device, the restore from iCloud command needs to be done on a different iPad otherwise they will not auto enrol and the iPad is not Supervised. If no one knows where these were bought from then you can use Configurator with Jamf to get them into DEP, link below for this.

https://www.jamf.com/jamf-nation/articles/502/knowledge-base-video-manually-enrolling-ipads-in-jamf-pro-with-apple-configurator-2

 

For some of our looked after students, they own the iPad and it will leave with them, but we also need to show how money is spent on specific apps for them- so im thinking normal apple id with jamf installed as a self enroll for them.

 

Teachers need to be able to make purchases etc .

 

For devices that are NOT school owned these should not be enrolled into DEP. You do not need any Apple ID on the iPad, you can assign apps to the device, whilst the end user may or may not have their own Personal Apple ID, signed into on the iPad, when the child/teacher permanently leaves school you can reclaim apps and content the school have bought for the them.

 

Basically only school owned iPads that are designated to students or specific classes will be in ASM -- i think. I think the rest might have to be handled differently, and then enrolled into Jamf.

 

You're correct that any devices not owned by the school can not be ASM/DEP. They can still be enrolled into Jamf and if you want a Supervised Profile installed you do this by using Apple Configurator. You can then manually enrol these into Jamf either by an email invite or just by going to the enrolment URL in Safari. Just bear in mind that the MDM profile on the iPad can be removed by the end user.

[PR-UK]

Hi,

 

We are moving to Apple school manager and Jamf from our other MDM.

 

We have had the training, and anything but one thing was not explained - if we tick the box to sync all our devices (apple school manager) to Jamf will it try and "over write" all the current devices profiles, and data?

 

Might seem a silly question but we would like to stage the deployment so we can weed out any weird ones.

 

Any help much appreciated.

 

Out of curiosity, which MDM did you switch from?