MDM - iPad Lockdown

[MatthewL]

We have some iPad's that are going to be enrolled in our MDM, historically we have never really managed these as there has been so few but this time its a batch of 10 and other issues have arisen so my job to setup a profile etc.

 

My question is what things do you restrict etc? Obviously we are enforcing that things like location etc are on, tracking. I've never touched the config before so wondered if anything to look for?

[LukeMoss]

Which solution are you looking at? We block things such as explicit content, siri profanity filter etc etc. If you're going to be looking into Lightspeed I would suggest literally going down the policy list and asking yourself is it needed if you're unsure block it and someone will tell you if they need it once they can't. Better to be proactive than reactive in my opinion.

 

Whilst you're at it, when you say enrolling in your MDM do you have your devices in the DEP? I would suggest this as it auto enrols and makes life much easier. Let me know if you need anything / have any questions I might be able to answer from experience.

[MatthewL]

We already have ManageEngine MDM and will be using that just creating a new config for these devices going to a team.