iPads for Staff and Apple IDs

[Sheridan]

We've rolled out some ipads for Staff - as we are an MS school they are preloaded with all the usual MS apps and managed by Mosyle. Works a treat and we lock out using a personal Apple ID as from past experience (albeit a few years ago!) when this was allowed and staff left they often forget to logout leaving the device locked.

 

However a couple of people now want to use some of the apple default apps (garageband etc) and this requires an Apple ID - I still don't want to open personal apple ids so how are any of you handling this? With a generic school account, or an additional account per device?

[Sheridan]

5 minutes ago, Sheridan said:

We've rolled out some ipads for Staff - as we are an MS school they are preloaded with all the usual MS apps and managed by Mosyle. Works a treat and we lock out using a personal Apple ID as from past experience (albeit a few years ago!) when this was allowed and staff left they often forget to logout leaving the device locked.

 

However a couple of people now want to use some of the apple default apps (garageband etc) and this requires an Apple ID - I still don't want to open personal apple ids so how are any of you handling this? With a generic school account, or an additional account per device?

Edit - think I've found it - its the native app that causes the problem so blocking that and then installing it via ASM/VPP adds it with a vpp license...need to test this out first though

[3s-gtech]

Account per user with ASM (synced across from Entra). I can then license the apps and push them out with my MDM.

[Sheridan]

9 minutes ago, 3s-gtech said:

Account per user with ASM (synced across from Entra). I can then license the apps and push them out with my MDM.

I was hoping to avoid this as its maybe only about 5% of the users who want these apps. I did think it was because it was the built in/preinstalled version but adding with our MDM hasn't worked either. 

[3s-gtech]

I'd originally avoided it (for 10 years or so!), but it does work well and didn't take too much faff really. I had to move my ASM account to a different Apple ID then sync'd the lot. I don't tend to interact with it much.

[Rob_D]

13 minutes ago, Sheridan said:

I was hoping to avoid this as its maybe only about 5% of the users who want these apps. I did think it was because it was the built in/preinstalled version but adding with our MDM hasn't worked either. 

We just manually create the apple IDs for the 20 or so user who are issued with ipads/iphones.

[Sheridan]

Just tried again, and forcibly deleting the app, then reinstalling it from the MDM (making sure a VPP license is showing as assigned) and it now seems to work! It looks like it has to be fully removed and reinstalled for it to register - might be a manual job but its only a handful of users so not too bad