Can I remove the 'Trusted Device' request from our iPads

[TwistedHelixis]

Sorry but I am very new to the world of iPads. Taken over a very small school (5 teachers) that also have 15 iPads. One of the things that the IT coordinator has mentioned is that when he tries to install an app it comes up with a Trusted device message.

 

The school also have a mac mini and the config software installed.

 

I will be at the school later but have a couple of questions.

 

Would the mac mini be the trusted device, do the iPads ask for permission from the mac mini before installing any apps?

 

If the mac mini is the trusted device, how can I disable this feature, so the teachers can install the apps they need.

[Brimstone]

Just tap OK on the iPad when it asks for this when you are installing apps via AC2, feature should not be disabled with Supervised iPads.

 

Personally AC2 is rubbish, better off using an MDM to manage them.

[TwistedHelixis]

OK, so they are trying to install the apps from the iPad itself not from AC2.

 

The IT coordinator would like to be able to install any apps that are needed. Should he be logging in to AC2 and installing them from there?

 

This is such a small primary school, is there any point in having the tablets managed? Its not like its going to take long to rebuild one from scratch if needed, they only have a couple of apps installed, the school only has 4 classes.

 

 

Are there any free MDM systems or very cheap you can recommended?

[TwistedHelixis]

Just had a chat with the IT coordinator and he would like the 4 teacher tablets to be non managed.

 

Any advice how I would make these un-managed devices?

[XiJ]

Try Mosyle MDM. Free tier is very good and should be enough for a small school. Doesn’t necessarily exclude per user installs but generally I’d encourage a school VPP Account and all licenses(free or paid apps) go through that.

 

The It co-ord can then deploy an app from a browser from anywhere.

[TwistedHelixis]

Also just found this that supports Android, Chromebooks and iPads - https://www.mobileguardian.com/products/schools/ Edited May 1, 2019 by TwistedHelixis

[Brimstone]

Just had a chat with the IT coordinator and he would like the 4 teacher tablets to be non managed.

 

Any advice how I would make these un-managed devices?

 

Any school owned devices should be managed, they are owned by the school not the teacher and it stops the following from happening when you use an MDM

 

Activation Lock - Teacher signs into iPad with personal Apple ID then leaves the school with signing out of said iPad. You can not reset the iPad without Apple ID Password. With an MDM in place to can create a special code to sign into the iPad and reset it.

 

iPad Security - How can you track an iPad if it gets lost of stolen?

 

Invest in an MDM, it will save you so much time

[Brimstone]

OK, so they are trying to install the apps from the iPad itself not from AC2.

 

The IT coordinator would like to be able to install any apps that are needed. Should he be logging in to AC2 and installing them from there?

 

This is such a small primary school, is there any point in having the tablets managed? Its not like its going to take long to rebuild one from scratch if needed, they only have a couple of apps installed, the school only has 4 classes.

 

 

Are there any free MDM systems or very cheap you can recommended?

This is because there is 2FA verification for each users Apple ID (You must use an individual Apple ID for each user, not the same one)

 

See below for details...

 

https://support.apple.com/en-gb/HT204915

[TwistedHelixis]

Any school owned devices should be managed, they are owned by the school not the teacher and it stops the following from happening when you use an MDM

 

Agreed, but how do I un-manage them from AC2, I am finding Apple config software really clunky and not very logical in its design.

[Rob_D]

Agreed, but how do I un-manage them from AC2, I am finding Apple config software really clunky and not very logical in its design.

You should be able to go into the Settings>General>Device Management on each ipad and just delete the management profiles. (do this by tapping into the management profile and selecting Delete or Remove Management.)

[TwistedHelixis]

You should be able to go into the Settings>General>Device Management on each ipad and just delete the management profiles. (do this by tapping into the management profile and selecting Delete or Remove Management.)

 

Perfect thanks, I'll give that a go later

[TwistedHelixis]

Hi, I don't have device management listed in General and cant seem to find it anywhere. This is a iPad mini 4

[TwistedHelixis]

(You must use an individual Apple ID for each user, not the same one

 

Just checked and they have all been setup under the same user.

[LukeMoss]

I would suggest getting yourself on VPP and signing up for like mentioned to purchase all apps through that keeps with licensing agreements. You should be purchasing one licence per device as tempting as it is to buy an expensive app once and put it on all of them.

 

I would also set your school for Apple School Manager and get yourself enrolled in DEP which supervises devices out of the box therefore if stolen the device will continually re-enrol back into your MDM to keep it managed and a continual stream of information (talking from experience).

 

I use Lightspeed, you don't need Apple ID's as the app is pushed to the device and not the user which helps for student devices. It gives you much more control over the device which is massively helpful. It's £5 per device per annum.

 

If I were you I'd do all the steps now rather than having more iPads which become increasingly hard to control. Let me know if I can help you with anything, I've set this up in two large primary schools covering about 300 devices.

[TwistedHelixis]

I would suggest getting yourself on VPP and signing up for like mentioned to purchase all apps through that keeps with licensing agreements.

I think they already have that, I seem to remember VPP being on a password list I was given by the old tech.

 

I would also set your school for Apple School Manager and get yourself enrolled in DEP which supervises devices out of the box therefore if stolen the device will continually re-enrol back into your MDM

They might also have this as we had a faulty iPad that needed re building but it kept ignoring my setup settings.

 

Is there an easy way to tell if they have VPP or School Manger already setup?

[Brimstone]

Looks like you need a whole guide to read.....

 

https://help.apple.com/schoolmanager/en.lproj/static.html

[TwistedHelixis]

If we went with something like Mosyle MDM - https://manager.mosyle.com/ would we still need the Mac mini with AC2, VPP etc, or does that replace everything?

 

The reason I ask is not only does it look like the schools MAC mini is on its last legs and will need replacing soon, but the apple software for controlling their own products seems horrible and I don't want to invest a crazy amount of time learning AV2 or school manager if we can use something else.

[LukeMoss]

So, you could use the Mac Mini as a caching server instead of using it for AC2.

 

VPP you would still need to use as this is for the purchase of apps, I've not worked with Mostyle, but I assume its the same in the fact you link your MDM with your VPP account so your apps show up once you have purchased them. School Manager you only need really whilst linking your MDM to your Apple School Manager for the DEP of your devices. DEP allows the supervision of your devices straight out of the box and again I don't know Mostyle but you create configuration profiles within your MDM for the steps to follow during activation.

 

Hopefully that makes some sense

[tmoon-mint]

Depending how the devices were originally setup you would still need AC2 either to add them into DEP or supervise them. Devices that support iOS 11 can be added to DEP via AC2.

[TwistedHelixis]

Some more basic questions - sorry.

 

1.How do I access or control VPP? I just have a username and password.

 

2.How do I access or control DEP?

[LukeMoss]

Access VPP by going to https://vpp.itunes.apple.com/?l=en then input your username and password. You need to log into your Apple School Manager to find your DEP number and you can see devices that have been assigned to your account.

 

It's worth keeping in mind like above that if they haven't been added to DEP you can do this via AC2 , but the profile can be removed within 30 days.

[Rob_D]

It's also probably worth converting your VPP and DEP accounts into an Apple School one. I've found the apple school interface much more intuitive and useful, and having both things in the same place helps.

https://school.apple.com/

[TwistedHelixis]

OK, this is all starting to click together. Sorry for my slow take-up. I do have a couple more questions.

 

It's worth keeping in mind like above that if they haven't been added to DEP you can do this via AC2 , but the profile can be removed within 30 days.

What if they have already been added using AC2, is it an issue not being able to remove the profile?

 

I believe everything is currently setup on the mac, using AC2, what happens if the mac dies? I am assuming it is possible to purchase a new mac mini, install AC2 and somehow have all the profiles and settings restored.

 

- - - Updated - - -

 

It's also probably worth converting your VPP and DEP accounts into an Apple School one. I've found the apple school interface much more intuitive and useful, and having both things in the same place helps.

 

Thanks, I will take a look at doing that

[TwistedHelixis]

@Rob_D

Just went to Apple School Manager. The login does except the schools vpp user account, should I be using this or setting a new account up?

[Rob_D]

@Rob_D

Just went to Apple School Manager. The login does except the schools vpp user account, should I be using this or setting a new account up?

 

We used our VPP account without any issues.