Tech Help Direct support many Brisbane, Gold Coast, Sunshine Coast & Northern NSW schools and businesses with Device Enrollment Program (DEP) configurations. Our team are specially certified, partnered and trained by Apple to assist with solutions around DEP. We have vast experience with many MDM platforms that integrate with the DEP system to enable simplified, “drop-shippable”, end-to-end management for your fleet of iOS devices.
The Device Enrollment Program is Apple’s solution to automatically enrolling a Mac OS X or iOS device into a nominated MDM. The device can be automatically supervised by configuring in the DEP portal and simply turning the device on and joining a wireless network. DEP has been available in Australia since November 2014, where devices that are purchased after this date (from an eligible Apple reseller like Apple Retail) are eligible to enrol in the program. The school must apply for the devices to be sold through a specific channel from the Apple reseller, where then, they are activated in DEP. The device can then then managed for pre-stage enrolment in the DEP portal.
Eliminates the need for pre-configuration at a single physical location by configuring over USB.
Automated enrolment in MDM upon turning the device on and joining a wireless network.
MDM management profiles can be set as non-removable as shown below. Note that there is no “Remove” option.
Device Supervision provides a higher level of device management to iOS devices. It adds certain additional restrictions that would generally be used when deploying an institution-owned shared or one-to-one model (see supervised restrictions example below from Cisco Meraki Systems Manager MDM). It also adds controls and functions like the ability to silently (without the end user knowing) install applications and other profiles. In order to “supervise”, the device, it must be pre-configured with Apple Device Enrolment program or Apple Configurator.
Managed devices (e.g. Shared and One-to-One deployments) are enrolled in an MDM with the ability to deploy settings dynamically with fine grained controls over apps and content. IT is able to remotely wipe, reset passwords or lock devices. An unmanaged device (e.g. BYO deployment) is configured manually or with a once-off profile. It is set once and not updated. There is no over-the-air management as the device is not enrolled in an MDM platform. The model to use is at the discretion of the school’s objectives and deployment model.