[ipad] Mo' iPads, Mo' Problems

[tom_newton]

I utterly disagree with you.

 

iPads represent the smallest support footprint imaginable as long as you do your reading up and knowledge beforehand and buy the right solution to support them.

 

There are 2 very succesfully organisations in the UK managing thousands of schools iOS devices, all done completely remotely and just a handfull of extremely knowledgable engineers.

 

I'd stick InTune right at the bottom of largely complete cack you mentioned...

 

You have to wade through Microsoft's over complicated licencing for it, there are plenty of payload API's used by other MDM's very well that InTune doesn't even have, and most importantly it doesn't even support one of Apple killer Education free features "Apple Classroom" or (in the context of this thread) Apple's Shared iPad configuration.

 

I know IOS can be done well - tho often they're not, and many times without consulting IT. Definitely having Apple experts on hand is very useful.

 

We have a few customers doing Shared iPads with inTune - it must have improved slightly since last you looked? Not sure about Classroom tho - we don't tend to cross into that element.

[Brimstone]

I know IOS can be done well - tho often they're not, and many times without consulting IT. Definitely having Apple experts on hand is very useful.

 

We have a few customers doing Shared iPads with inTune - it must have improved slightly since last you looked? Not sure about Classroom tho - we don't tend to cross into that element.

InTune for Shared iPad is in public preview e.g. It's a beta only so try it...Would you expect schools to 'try" this with classes, I doubt it.

 

You have to Federate your AAD (it has to be pure Azure) with Apple School Manager to use Shared iPad, I can set this up in minutes using Jamf or Mosyle with having to Federate.

[mrstrong]

interesting thread, not read all in detail but we have lightspeed and ipads working "ok" (-ish ).

If its any help this is how we used to do it:

we used a mac to prepare the devices "manually" using apple configurator

(i.e choose "do not enroll in mdm") then supervise and allow pair with computers (so you can plug in via usb to get photos off etc)

(if existing ipads erase all content and settings first)

in lightspeed download the bulk enroll profile to the mac from the group you want them in

then connect ipad to wifi and add the bulk enroll profile in apple configurator

 

no users or logins.

 

For new devices you're best using DEP. We followed this guide

https://help.lightspeedsystems.com/s/article/dep-how-to-setup-device-enrollment-program?language=en_US

[LeMarchand]

No Mac! Though, judging from posts above we need one as a caching server. One of today's jobs is trying to re-enroll the wiped machine.

[Katy]

If you end up getting a mac make sure you install Apple Configurator 2, you can erase iPads through there if the option is restricted on the device (like with iTunes but don't have to pollute your PC!). Also means you can add additional iPads to DEP if any turn up which aren't DEPed.

 

On the Intune debate, fine I'm probably biased but it did everything we needed with iPads, previously we were on Meraki.

[mrstrong]

No Mac! Though, judging from posts above we need one as a caching server. One of today's jobs is trying to re-enroll the wiped machine.

 

yes worth getting mac to use a cache server. Sounds like you're nearly there, once you get them erased and

assigned a profile in lightspeed with "Shared Device: false" it should all just work.

 

Also somebody mentioned tags in jamf, lightspeed doesn't seem to use tags, rather groups which are worth planning in advance

a bit like OUs in AD, can get confusing with inheritance etc.

E.g. we have two groups Pupils and Staff, each group has their own apps, restrictions, wifi, web shortcuts etc.

Sometimes an ipad has been put in Staff and Pupil groups so it gets "all" of the apps for example but then it also gets Pupil restrictions

so e.g. can't erase etc! This has caught me out a few times. Not sure if lightspeed have any articles on best practice setup as I'm sure

the way we've got it is not optimal (I inherited the setup)

[LeMarchand]

FINALLY got the iPad wiped and back in the Lightspeed gang. SEEMS to be working as expected, but I'm waiting for a teacher to test. (Though what will happen is that they won't test it, and I'll only find out stuff doesn't work when they actually bother to use it and it will be my fault for not being able to guess what they wanted to do).

 

Grabbed another to reset and see if having >1 device doesn't stuff things up.

[LeMarchand]

I think some of the problems I have are down to things not being where you would expect them to be in either ASM or Lightspeed. The same accusations could probably be aimed at Windows, but I guess I'm used to its idiosyncrasies.

[Brimstone]

I think some of the problems I have are down to things not being where you would expect them to be in either ASM or Lightspeed. The same accusations could probably be aimed at Windows, but I guess I'm used to its idiosyncrasies.

I agree if I had a pound for every MDM I've come across that's a complete an utter mess, or an ASM account where someone has tried to get around the rules I'd have retired very rich.

[Koldov]

Are you sticking with 'shared iPads...?

 

Thought the Mac caching server was recommended for that, but not much reason to if not...

 

We have one setup left over from how we used to manage the iPads, it has AC2 on, but we don't use it and the 'caching' rarely gets used (only at iOS update times).

[LeMarchand]

Are you sticking with 'shared iPads...?

 

Thought the Mac caching server was recommended for that, but not much reason to if not...

 

Probably not. You might have saved us some cash/cache!

 

Finally got the one I was having problems worth back in the gang (as unshared) and grabbed another to see if having >1 affected things. That took an age as there was a reason why it had been dumped on a shelf out of the way...

 

Anyway, after weeks of complaints about the iPads, I sent out a "Curriculum Staff" email explaining that we had two set up in a hopefully improved way that needed testing "in the wild" and asking for volunteers. Bet you can case how many responses I got.

[Brimstone]

Are you sticking with 'shared iPads...?

 

Thought the Mac caching server was recommended for that, but not much reason to if not...

 

We have one setup left over from how we used to manage the iPads, it has AC2 on, but we don't use it and the 'caching' rarely gets used (only at iOS update times).

If you have more than 60 x iPads a caching server is STILL a critical part of a good infastructure for ensuring your iPads don't eat the bandwidth for your broadband.

[2ilent8cho]

Thats our main caching server stats, saved us 1.57TB of bandwidth in last 30 days.

 

Edited February 18, 2022 by 2ilent8cho

[LeMarchand]

STILL waiting for a tester, but have yet another question.

 

Prepped a different pad, and in the Lightspeed Dashboard correctly identifies it as missing the 14 apps that all the others have. Unfortunately it also says that the apps were installed on various unlikely dates (before the pad was reset and over 1/2 term when it was off amongst them). Re/installing from either "Inherited" or "Missing" doesn't seem to do anything.

 

Any ideas?

[simpsonj]

STILL waiting for a tester, but have yet another question.

 

Prepped a different pad, and in the Lightspeed Dashboard correctly identifies it as missing the 14 apps that all the others have. Unfortunately it also says that the apps were installed on various unlikely dates (before the pad was reset and over 1/2 term when it was off amongst them). Re/installing from either "Inherited" or "Missing" doesn't seem to do anything.

 

Any ideas?

 

Check the Queued Activities and Activity Errors tab. From the Options menu, try clearing queued activities (even if it's showing as blank) then Reinstall Apps - Then check the Queued Activities tab again to see if the Apps appear there to be installed.

 

I've always found Lightspeed a little hit and hope to be honest...

[LeMarchand]

Check the Queued Activities and Activity Errors tab. From the Options menu, try clearing queued activities (even if it's showing as blank) then Reinstall Apps - Then check the Queued Activities tab again to see if the Apps appear there to be installed.

 

I've always found Lightspeed a little hit and hope to be honest...

 

Cleared the queue and told it to reinstall. Not much seems to be happening; I'll look in tomorrow.

 

Lots of "bag load failed" errors...

[mrstrong]

yes lightspeed can be a bit frustrating at times, you could try a live support chat as you can send them

the web url and they are able to see what you see

[LeMarchand]

yes lightspeed can be a bit frustrating at times, you could try a live support chat as you can send them

the web url and they are able to see what you see

 

I think I'll be doing that tomorrow, as nothing seems to have installed.

[LeMarchand]

Hangs head in shame and apologises to the ghost of Steve Jobs. Lightspeed recommended testing via a hotspot, which worked. When I went to switch to a manual, rather than .pac, proxy I noticed that there was a typo in the address. I've been struggling with this for days!

[Koldov]

 

Glad you've got it sorted, or at least you're getting there!

[LeMarchand]

If you do a Google search for "lightspeed dfu reenroll" this thread is now the second result. Fame at last!

So, what's been happening since my last post? Still no cache server, mainly down to cost and my reluctance to throw good money after bad as I am beginning to hate these things more with every passing day.

Current problems:

 

 

1. Loads had "disappeared". Got most of them back by marking them "lost", but after marking them "found" it took days for them to show as viable.
   
2. A teacher finally agreed to test the new setup. Wiped/DFU'd four. Days later, one has got the new profile but has yet to receive apps. One didn't get the profile or apps. Two are still awaiting the configuration.
   
3. Pushing out a new app seems to have failed (this was one of the few things that was working well). Mind you, there was already an installed app with the same functionality.
   
4. One app has decided to briefly open and then close.
   
5. Clicking on "add response" in the SeeSaw app throws a "The operation couldn't be completed. No such file or directory." But not consistently. Sometimes it does "just work".
   

 

Gonna be trying Mosyle soon, but not holding my breath!

[Dan2025]

If you do a Google search for "lightspeed dfu reenroll" this thread is now the second result. Fame at last!

So, what's been happening since my last post? Still no cache server, mainly down to cost and my reluctance to throw good money after bad as I am beginning to hate these things more with every passing day.

Current problems:

 

 

1. Loads had "disappeared". Got most of them back by marking them "lost", but after marking them "found" it took days for them to show as viable.
   
2. A teacher finally agreed to test the new setup. Wiped/DFU'd four. Days later, one has got the new profile but has yet to receive apps. One didn't get the profile or apps. Two are still awaiting the configuration.
   
3. Pushing out a new app seems to have failed (this was one of the few things that was working well). Mind you, there was already an installed app with the same functionality.
   
4. One app has decided to briefly open and then close.
   
5. Clicking on "add response" in the SeeSaw app throws a "The operation couldn't be completed. No such file or directory." But not consistently. Sometimes it does "just work".
   

 

Gonna be trying Mosyle soon, but not holding my breath!

 

Ouch! It sounds like you're having a fun time!

 

Mosyle should be an improvement, I've used it in the past across multiple sites and it worked really well. I do prefer Jamf although recency and being the one to set it all up might make me a little biased.

[Alis_Klar]

We switched from Lightspeed to JAMF and biggest thing we noticed was when you make a change it happens on the iPad immediately not after a minute wait as with Lightspeed. Also no more slow interface.

 

Also it works more like GPOs where you can apply multiple profiles to a single group or device.

 

Jamf is just better than Lightspeed in most ways.

[LeMarchand]

We switched from Lightspeed to JAMF and biggest thing we noticed was when you make a change it happens on the iPad immediately not after a minute wait as with Lightspeed. Also no more slow interface.

 

Also it works more like GPOs where you can apply multiple profiles to a single group or device.

 

Jamf is just better than Lightspeed in most ways.

 

A minute! More like a week at the moment (if that lucky). Might try JAMF if I can't get on with Mosyle.

[titch]

Sounds like "things done changed" in the MDM world

 

Gets coat