Staff ipad cloning?

[leegcvcc]

I'm after some advise please regarding deploying iPads for some staff.

 

We have had 20 iPads and haven't bought any for years, and ditched the Apple device management software used years ago. I think it was the Apple configurator which just managed apps and restrictions etc, but was still quite a manual setup. The MAc mini which was used has gone a long time ago too.

 

We have just purchased 16 more ipads which are for Staff only and not for shared use.

 

Really restricting these aren't really an issue, so looking at ways to deploy this in as little time possible.

 

They will need:

-to be setup for basic use, language etc (this takes ages manually per iPad)

-Same appleID on each ipad

-Wireless access set up for school (and use at home option) - can use a common wifi key

-smoothwall mitm certificate installed

 

Then:

-Need some free apps and possibly some paid for one's (so a VPP is required?)

-Email set up for each user (they can do that under instructions if necessary)

 

 

-Then Find my Phone or something similar

 

For these few, I'm looking at whatever can be done using free software. I've had a read of the different possibilities, but it all seems to end up with paying something along the line

 

Can I do what I want with Apple Configurator for Mac and Apple School Manager? or is there something worth paying for for such a small requirement? (No budget!)

 

Appreciate any advice from the experienced folk here! Many thanks in advance.

[DalekSec]

AC2 + ASM + Mosyle = Winner

 

Unsure is Mosyle still has free tier but its worth cost if not!

 

You will 100% want them managed though regardless.

[LeMarchand]

We use Mosyle free for 62 iPads. It seems to be <30 now, so you should still be OK. Not sure it does all of that: school too tight for paid apps, but the free apps work and the payment is via ASM so shouldn't be a problem, not sure about the email bit, and there is a built in "locate" thing. Worth a look - you may even get a Mosyle person who'll do the initial heavy lifting. I just use my PC, ASM and Mosyle with rare forays into iTunes to reset the odd pad.

 

I suspect some of the other players, like JAMF, will also offer some sort of free tier.

[Brimstone]

I'm after some advise please regarding deploying iPads for some staff.

 

We have had 20 iPads and haven't bought any for years, and ditched the Apple device management software used years ago. I think it was the Apple configurator which just managed apps and restrictions etc, but was still quite a manual setup. The MAc mini which was used has gone a long time ago too.

 

We have just purchased 16 more ipads which are for Staff only and not for shared use.

 

Really restricting these aren't really an issue, so looking at ways to deploy this in as little time possible.

 

They will need:

 

-Same appleID on each ipad.

 

Do not use the same Apple ID for the iPads, Apple will notice this is suspicious activity and block you from creating anymore after the first 3 or 4. If you want to give teachers access to the App store then let them use their school email for the Apple ID.

[CHiLL]

Do not use the same Apple ID for the iPads, Apple will notice this is suspicious activity and block you from creating anymore after the first 3 or 4. If you want to give teachers access to the App store then let them use their school email for the Apple ID.

Back in about 2015, that's what we were advised from Apple and other sources. We later discovered that it wasn't necessary and added extra cost at having to purchase apps many times. Since about 2017, we've been using the same single Apple ID and have approximately 175 iPads configured this way.

[Primus]

Back in about 2015, that's what we were advised from Apple and other sources. We later discovered that it wasn't necessary and added extra cost at having to purchase apps many times. Since about 2017, we've been using the same single Apple ID and have approximately 175 iPads configured this way.

 

That would be in breach of the licence agreement - do you just buy one Windows licence and use it across your entire fleet too as that's the equivalent.

[steveg]

If you have more than 2 iPads then go the MDM route every time. If you have Microsoft A3 licenced then you can use intune for free, or there are other free or cheap alternatives being suggested.

 

Don't use the same apple id across all the iPads, it is without question illegal to do this to deploy paid for apps, and a bad idea just for free app for a whole range of reasons.

 

Also need to think about how to identify each member of staff on the iPad for things like smoothwall filtering etc.

[PotNoodleTech]

Definatly set up Apple School Manager so you can manage school purchased apps across the fleet - and use Mosyle Free to lock them down and apply settings etc. You don't need an apple ID on managed ipads as all the app and settings deployment happens through the MDM and ASM.

 

It's honeslty worth setting up so much easier to run and just works day in day out. PLus if you get more devices later on = super easy to bang them on and send them out.

[Brimstone]

Back in about 2015, that's what we were advised from Apple and other sources. We later discovered that it wasn't necessary and added extra cost at having to purchase apps many times. Since about 2017, we've been using the same single Apple ID and have approximately 175 iPads configured this way.

 

You are as said breaking App Store policy licencing rules and I doubt you will be able to create anymore, iPads with the correct MDM and ASM in place do not require any Apple ID for apps to be pushed any longer. Apple's policy way back was not to put the same Apple ID on every device, it has never advised this (you may have talked to someone in a store who thought they knew) For schools that wanted a Personal Apple ID on devices back then had to request a 30 day whitelisting from Apple so they could create all of the Apple ID's in batches.

 

Using the same Apple ID is a major security risk to both students and teachers using them as a single hacker with a single phishing email or message can gain access to every photo, email, message and content on every iPad. If that Apple ID becomes useless to you because of this it will leave you in such a mess I wouldn't know where to start.

 

To be able to push "many" apps to all your users you have buy VPP Credit for the correct number of licences, currently every app you have bought belongs to a single Apple ID.

 

Once you find yourself blocked by Apple you will start all over again with every App via VPP Credit and remove every Apple ID from the iPads.

[harlequin1865]

I realise it is different for me, as I am now supporting schools in NZ, the MoE over here pays for the tennants for Google and Microsoft etc, so as far as the schools are concerened it is free. We used to use Meraki and Mosyle, but with Intune being free (to the schools) we have moved everything to intune.

 

It's not such an easy setup as the others, but Free is a strong word.

 

All the ipads (that can be) are enrolled in Apples DEP / ASM for each school and then pointed at Intune as the MDM of choice.

 

I have just sent out an app called seesaw to 110 ipads at one school, took me less than 5 minutes, 10 minutes later 92 have installed the app, the rest are pending.

 

Using an id, especially a shared one with the app store would be a big fat Nope! from me.

 

Plus as others have said it would contravene the terms from Apple, and as you know they are such a cuddly and fuzzy forgiving organisation.

 

Just to let you know, I look after 12 schools, one of which is special needs and has multiple sites, 22 all in. Without the MDM it would be a nightmare to admin, ipads alone I am looking after 1900 of them.

Edited November 11, 2024 by harlequin1865
uodate

[Sonic007]

Jumping on the bandwagon here so I hope you don't mind a question from me...

 

If I don't have Apple Configurator or any Macs to get this then how can I supervise iPads before enrolling them into Mosyle?

 

Thankyou.

Edited November 20, 2024 by Sonic007

[PotNoodleTech]

I *think* you need apple configurator full stop so get on either an ipad or a mac mini - used/refurb would do as long as it's not _too_ old.

[LeMarchand]

If I din't have Apple Configurator or any Macs to get this then how can I supervise iPads before enrolling them into Mosyle?

 

Do you have Mosyle and want to add existing pads to it?

[Sonic007]

Do you have Mosyle and want to add existing pads to it?

 

 

Yes, I have a Mosyle account all setup and have used this in the past to push out apps to all our iPads.

 

I can ofcourse just get the URL and install Mosyle onto each iPad and it will go away and do it's thing, downloading all the apps and settings as I have setup.

 

But.... Students can just then go and delete the Mosyle profile as the iPads are not set as supervised. Back when we did this ages ago, we had a Macbook running Configurator in order to Supervise them. Can't get them into Apple School manager either as they are older iPads.

 

Thanks.

[TheHyperTechie]

I *think* you need apple configurator full stop so get on either an ipad or a mac mini - used/refurb would do as long as it's not _too_ old.

 

This is correct, devices will only be supervised automatically if purchased and enrolled straight into Apple school manager.

 

You will have to use an old mac with AC2 to add them manually into ASM and supervise them. However... by following this method users have up to 30 days to remove any MDM profile assigned to the device, making it un-supervised. This was added by Apple as a security measure.

[Olliedawg]

This is correct, devices will only be supervised automatically if purchased and enrolled straight into Apple school manager.

 

You will have to use an old mac with AC2 to add them manually into ASM and supervise them. However... by following this method users have up to 30 days to remove any MDM profile assigned to the device, making it un-supervised. This was added by Apple as a security measure.

 

You can also add them with an iphone with the AC2 app, done it here when our supplier didn't add on a small amount of iPads we ordered.

[TheHyperTechie]

You can also add them with an iphone with the AC2 app, done it here when our supplier didn't add on a small amount of iPads we ordered.

 

Yes! I forgot about the iOS app. Thanks

[steveg]

There is an app for iPhone now as well which you can use instead of a mac.