Chris Nilsson

Chris Nilssoncnilsson@lcisd.org

@chrisnilsson

Enterprise iOSPlugging the Holes*

Behind the Asterisk*

Enterprise iOS

What are they hiding?

Enterprise iOS

50 free resources for managing iPads

1

3

5

Volume Purchase Program

Q&A

Lamar CISD's Hybrid Model2

3 Content Management

Agenda

Device Management

iOS Progress

553322 44

App storeiPhone Configuration Utility

Multiple iTunes Accounts on a device

Native MDMWireless App Distribution*

PC FreeiCloudPush Apps*

66

Supervise ModeForce HTTP ProxySet Wallpaper

77

Data SecurityPer app VPNManaged Distribution

User Configuration

Device Settings

Security

Restrictions

Apple's VersionDevice Management

User Configuration

Device Settings

Security

Restrictions

Apple's VersionDevice Management

• WiFi

• Passcode

• Web Clips

User Configuration

Device Settings

Security

Restrictions

Apple's VersionDevice Management

• WiFi

• Passcode

• Web Clips

• Exchange

• LDAP

• VPN

Apple's Version

User Configuration

Device Settings

Security

Restrictions

Device Management

• Exchange

• LDAP

• VPN

• WiFi

• Passcode

• Web Clips

• Web,YouTube, App Store

• Camera, FaceTime, iCloud

• Content Ratings

Apple's Version

User Configuration

Device Settings

Security

Restrictions

Device Management

• APN

• SCEP

• x.509 Certificates

• Web,YouTube, App Store

• Camera, FaceTime, iCloud

• Content Ratings

• WiFi

• Passcode

• Web Clips

• Exchange

• LDAP

• VPN

Apple Configuration Utility

MDM Platform

Security

VPP Manageme

nt

Auditing

Apple Configuration

Utility

Enterprise Management

‣ Users can delete MDM profile*

‣ Device can be wiped*

‣ No REAL app management*

‣ Cost

MDM Limitations

JAMF Casper Suite

$50,000 per year

Current MDM Solution

HybridMDM

Meraki WordPress

Meraki

Meraki

Meraki

Meraki

Meraki

Meraki

Meraki

Meraki

‣ Hosted (can be a philosophical limit)

‣ No Directory Services Support (LDAP)

‣ Cost*

Meraki Limitations

WordPress

WordPress Custom Plugin

WordPress Custom Plugin

WordPress Custom Plugin

WordPress Custom Plugin

WordPress Custom Plugin

Tagging

Group VPPPersonal

iTunes

1 32

Content Management

Group

VPP

Personal1

3

2

Account Types

Group

VPP

Personal1

3

2

‣What everyone uses

‣Sync multiple PERSONAL

devices

‣Can purchase apps

‣iTunes is built around this

‣What everyone uses

‣Sync multiple PERSONAL

devices

‣Can purchase apps

‣iTunes is built around this

Account Types

Group

VPP

1

3

2 ‣Sync multiple devices

‣Can't pay for apps

‣Sync multiple devices

‣Can't pay for apps

Personal

Account Types

VPP

1

3

2

‣Apple's answer to

enterprises

‣Difficult to manage

‣FULL OF HOLES

‣All we have...

‣Apple's answer to

enterprises

‣Difficult to manage

‣FULL OF HOLES

‣All we have...

Personal

Group

Account Types

Apple Volume Purchase Program

Program Manager

Program Facilitator

s

End Users

Apple Volume Purchase Program

Program Manager

Program Facilitator

s

End Users

Apple Volume Purchase Program

Program Manager

Program Facilitator

s

End Users

‣Program Administrator

‣Single Account

‣Cannot Purchase

‣Program Administrator

‣Single Account

‣Cannot Purchase

‣Make Purchases

‣Distribute Apps*

‣Unlimited Number

‣Make Purchases

‣Distribute Apps*

‣Unlimited Number

‣Load Apps*

‣No Access to VPP System

‣Personal*

‣Load Apps*

‣No Access to VPP System

‣Personal*

VPP Distribution Options

Managed DistributionManaged DistributionCodesCodes

Ownership

Native MDM Support

MDM Required

Consumable*

Shaky MDM Link

Easy to Distribute

Enterprise Management

AppsUser Content

PolicySecurity

Content Management

Device Management

AppsUser Content

PolicySecurity

Content Management

Device Management

Enterprise Management

Content Management

Device Management

Holy Grail???

MDM PlatformNot

Yet

Still Missing the Mark

Need an OTA Solution that is DEVICE BASED!!!

MDM VPP Management

MDM VPP Management

MDM VPP Management

MDM VPP Management

iCafe Approach

‣ Link the Apple VPP process with district processes

‣ Manage programs not devices

‣ Enable a small number of people to manage thousands of apps

‣ Maintain ownership of app purchases

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

How Does iOS 7 Change Things?

Managed DeploymentManaged Deployment

iTunes Account

Nightmare

iTunes Account

NightmareAssured Compliance

Assured Compliance

Leverage MDM

Leverage MDM

LCISDMDM

Group

VPPMDM

A Hybrid Approach

Personal

???

Questions

Thank

you.Chris

Nilssoncnilsson@lcisd.org

@chrisnilsson