Chris Nilssoncnilsson@lcisd.org

@chrisnilsson

Enterprise iOSPlugging the Holes

11

33

55

Volume Purchase ProgramVolume Purchase Program

Q&AQ&A

Lamar CISD's Hybrid ModelLamar CISD's Hybrid Model22

33 Content ManagementContent Management

Agenda

Device ManagementDevice Management

iOS Progress

555533332222 4444

App storeApp storeiPhone iPhone Configuration Configuration UtilityUtility

Multiple iTunes Multiple iTunes Accounts on a Accounts on a devicedevice

Native MDMNative MDMWireless App Wireless App Distribution*Distribution*

PC FreePC FreeiCloudiCloudPush Apps*Push Apps*

4444

Supervise ModeSupervise ModeForce HTTP ProxyForce HTTP ProxySet WallpaperSet Wallpaper

User Configuration

Device Settings

Security

Restrictions

Apple's VersionDevice Management

User Configuration

Device Settings

Security

Restrictions

Apple's VersionDevice Management

• WiFi

• Passcode

• Web Clips

User Configuration

Device Settings

Security

Restrictions

Apple's VersionDevice Management

• WiFi

• Passcode

• Web Clips

• Exchange

• LDAP

• VPN

Apple's Version

User Configuration

Device Settings

Security

Restrictions

Device Management

• Exchange

• LDAP

• VPN

• WiFi

• Passcode

• Web Clips

• Web,YouTube, App Store

• Camera, FaceTime, iCloud

• Content Ratings

Apple's Version

User Configuration

Device Settings

Security

Restrictions

Device Management

• APN

• SCEP

• x.509 Certificates

• Web,YouTube, App Store

• Camera, FaceTime, iCloud

• Content Ratings

• WiFi

• Passcode

• Web Clips

• Exchange

• LDAP

• VPN

iPhone Configuration Utility

MDM PlatformMDM Platform

Security

VPP Manageme

nt

Auditing

iPhone Configuration

Utility

Enterprise Management

‣ Users can delete MDM profile

‣ Device can be wiped

‣ No REAL app management

‣ Cost

MDM Limitations

JAMF Casper Suite

$50,000 per year

Custom MDM Solution

LCISDLCISDMDMMDMMerakiMeraki WordPressWordPress

Meraki

Meraki

Meraki

Meraki

Meraki

Meraki

Meraki

Meraki

‣ Hosted (can be a philosophical limit)

‣ No Directory Services Support (LDAP)

‣ Cost

Meraki Limitations

WordPress

WordPress Custom Plugin

WordPress Custom Plugin

WordPress Custom Plugin

WordPress Custom Plugin

WordPress Custom Plugin

Tagging

GroupGroup VPPVPPPersonalPersonal

iTunes

11 3322

Content Management

GroupGroup

VPPVPP

PersonalPersonal11

33

22

Account Types

GroupGroup

VPPVPP

PersonalPersonal11

33

22

‣What everyone usesWhat everyone uses

‣Sync multiple PERSONAL Sync multiple PERSONAL

devicesdevices

‣Can purchase appsCan purchase apps

‣iTunes is built around thisiTunes is built around this

‣What everyone usesWhat everyone uses

‣Sync multiple PERSONAL Sync multiple PERSONAL

devicesdevices

‣Can purchase appsCan purchase apps

‣iTunes is built around thisiTunes is built around this

Account Types

GroupGroup

VPPVPP

11

33

22 ‣Sync multiple devicesSync multiple devices

‣Can't pay for appsCan't pay for apps

‣Sync multiple devicesSync multiple devices

‣Can't pay for appsCan't pay for apps

PersonalPersonal

Account Types

VPPVPP

11

33

22

‣Apple's answer to Apple's answer to

enterprisesenterprises

‣Difficult to manageDifficult to manage

‣FULL OF HOLESFULL OF HOLES

‣All we have...All we have...

‣Apple's answer to Apple's answer to

enterprisesenterprises

‣Difficult to manageDifficult to manage

‣FULL OF HOLESFULL OF HOLES

‣All we have...All we have...

PersonalPersonal

GroupGroup

Account Types

Apple Volume Purchase Program

Program Manager

Program Facilitator

s

End Users

Enterprise Management

AppsUser Content

PolicySecurity

Content ManagementContent Management

Device ManagementDevice Management

AppsUser Content

PolicySecurity

Content ManagementContent Management

Device ManagementDevice Management

Enterprise Management

Content ManagementContent Management

Device ManagementDevice Management

MDM PlatformMDM Platform

Holy Grail???

NOT YET

‣Purchases are still treated Purchases are still treated

as consumablesas consumables

‣Purchases are NOT linked to Purchases are NOT linked to

an accountan account

‣Not purpose builtNot purpose built

HolesHoles

‣Districts can ATTEMPT to Districts can ATTEMPT to

complycomply

‣Tax FreeTax Free

‣Volume DiscountsVolume Discounts

What Works

Volume Purchase Program

MDM VPP Management

MDM VPP Management

MDM VPP Management

MDM VPP Management

iCafe Approach

‣ Link the Apple VPP process with district processes

‣ Manage programs not devices

‣ Enable a small number of people to manage thousands of apps

‣ Maintain ownership of app purchases

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iCafe Approach

iPadiPad

Group

VPP/Wordpress

MDM/Wordpress

A Hybrid Approach

Personal

???

Questions

Thank

you.Chris

Nilssoncnilsson@lcisd.org

@chrisnilsson