Shared iPad Devices - Protecting Credentials

[Stephen_UK]

We have a number of iPad trolleys in school which are booked out by staff for classes. We have had a recent spate of incidents where malicious emails have been sent to staff and students from student email accounts which trace back to iOS devices behind our firewall. Having done some digging, it seems that a number of iPads have Office 365 account info saved in browsers and a simple click will sign in with that user.

 

No iPads have PIN code locks and they are MDM managed by Jamf (which I don't currently know that much about, being relatively new to school)

 

Is there any solutions for this? Windows devices our students obviously log into and have their own space so saved passwords are less of an issue, but iPads don't have the traceability (including the web browsing on Smoothwall, which I think will be anonymous (though I haven't actually checked in on this to be fair)

 

Thanks

[robintech]

If you can wipe and enroll them as shared iPads then you can set a Temporary Session Only option , guest mode is the only option and wipes everything after certain time idle and on logout.  

Or go full managed apple accounts for the shared iPad and sync it from your Microsoft AD , you can switch to that mode remotely without enrolling the iPads again.

[Olliedawg]

As above you need to enrol the iPads as shared devices. You can setup Apple School Manager to sync users from your MIS/365, then they can sign into the iPad using their email address + a password/PIN..

[Stephen_UK]

Thanks both - we will look into both of these options. Wiping them wouldn't be an issue, so both options definitely open to us

[tom_newton]

Yes - and if you do that you will get the chance to do proper auth to your smoothwall too - if the problem exists with email accounts persisting you may find the same with filter auth as well!