Post on 09-Jan-2016
description
Chris Nilssoncnilsson@lcisd.org
@chrisnilsson
Enterprise iOSPlugging the Holes*
Behind the Asterisk*
Enterprise iOS
What are they hiding?
Enterprise iOS
50 free resources for managing iPads
1
3
5
Volume Purchase Program
Q&A
Lamar CISD's Hybrid Model2
3 Content Management
Agenda
Device Management
iOS Progress
553322 44
App storeiPhone Configuration Utility
Multiple iTunes Accounts on a device
Native MDMWireless App Distribution*
PC FreeiCloudPush Apps*
66
Supervise ModeForce HTTP ProxySet Wallpaper
77
Data SecurityPer app VPNManaged Distribution
User Configuration
Device Settings
Security
Restrictions
Apple's VersionDevice Management
User Configuration
Device Settings
Security
Restrictions
Apple's VersionDevice Management
• WiFi
• Passcode
• Web Clips
User Configuration
Device Settings
Security
Restrictions
Apple's VersionDevice Management
• WiFi
• Passcode
• Web Clips
• Exchange
• LDAP
• VPN
Apple's Version
User Configuration
Device Settings
Security
Restrictions
Device Management
• Exchange
• LDAP
• VPN
• WiFi
• Passcode
• Web Clips
• Web,YouTube, App Store
• Camera, FaceTime, iCloud
• Content Ratings
Apple's Version
User Configuration
Device Settings
Security
Restrictions
Device Management
• APN
• SCEP
• x.509 Certificates
• Web,YouTube, App Store
• Camera, FaceTime, iCloud
• Content Ratings
• WiFi
• Passcode
• Web Clips
• Exchange
• LDAP
• VPN
Apple Configuration Utility
MDM Platform
Security
VPP Manageme
nt
Auditing
Apple Configuration
Utility
Enterprise Management
‣ Users can delete MDM profile*
‣ Device can be wiped*
‣ No REAL app management*
‣ Cost
MDM Limitations
JAMF Casper Suite
$50,000 per year
Current MDM Solution
HybridMDM
Meraki WordPress
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
‣ Hosted (can be a philosophical limit)
‣ No Directory Services Support (LDAP)
‣ Cost*
Meraki Limitations
WordPress
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
Tagging
Group VPPPersonal
iTunes
1 32
Content Management
Group
VPP
Personal1
3
2
Account Types
Group
VPP
Personal1
3
2
‣What everyone uses
‣Sync multiple PERSONAL
devices
‣Can purchase apps
‣iTunes is built around this
‣What everyone uses
‣Sync multiple PERSONAL
devices
‣Can purchase apps
‣iTunes is built around this
Account Types
Group
VPP
1
3
2 ‣Sync multiple devices
‣Can't pay for apps
‣Sync multiple devices
‣Can't pay for apps
Personal
Account Types
VPP
1
3
2
‣Apple's answer to
enterprises
‣Difficult to manage
‣FULL OF HOLES
‣All we have...
‣Apple's answer to
enterprises
‣Difficult to manage
‣FULL OF HOLES
‣All we have...
Personal
Group
Account Types
Apple Volume Purchase Program
Program Manager
Program Facilitator
s
End Users
Apple Volume Purchase Program
Program Manager
Program Facilitator
s
End Users
Apple Volume Purchase Program
Program Manager
Program Facilitator
s
End Users
‣Program Administrator
‣Single Account
‣Cannot Purchase
‣Program Administrator
‣Single Account
‣Cannot Purchase
‣Make Purchases
‣Distribute Apps*
‣Unlimited Number
‣Make Purchases
‣Distribute Apps*
‣Unlimited Number
‣Load Apps*
‣No Access to VPP System
‣Personal*
‣Load Apps*
‣No Access to VPP System
‣Personal*
VPP Distribution Options
Managed DistributionManaged DistributionCodesCodes
Ownership
Native MDM Support
MDM Required
Consumable*
Shaky MDM Link
Easy to Distribute
Enterprise Management
AppsUser Content
PolicySecurity
Content Management
Device Management
AppsUser Content
PolicySecurity
Content Management
Device Management
Enterprise Management
Content Management
Device Management
Holy Grail???
MDM PlatformNot
Yet
Still Missing the Mark
Need an OTA Solution that is DEVICE BASED!!!
MDM VPP Management
MDM VPP Management
MDM VPP Management
MDM VPP Management
iCafe Approach
‣ Link the Apple VPP process with district processes
‣ Manage programs not devices
‣ Enable a small number of people to manage thousands of apps
‣ Maintain ownership of app purchases
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
How Does iOS 7 Change Things?
Managed DeploymentManaged Deployment
iTunes Account
Nightmare
iTunes Account
NightmareAssured Compliance
Assured Compliance
Leverage MDM
Leverage MDM
LCISDMDM
Group
VPPMDM
A Hybrid Approach
Personal
???
Questions
Thank
you.Chris
Nilssoncnilsson@lcisd.org
@chrisnilsson