Chris Nilsson
77
Chris Nilsson cnilsson@lcis d.org @chrisnils son
description
@chrisnilsson. [email protected]. Chris Nilsson. Enterprise iOS. Plugging the Holes. Agenda. 1. Device Management. 3. Content Management. 3. Volume Purchase Program. 2. Lamar CISD's Hybrid Model. 5. Q&A. iOS Progress. PC Free iCloud Push Apps*. - PowerPoint PPT Presentation
Transcript of Chris Nilsson
Enterprise iOSPlugging the Holes
11
33
55
Volume Purchase ProgramVolume Purchase Program
Q&AQ&A
Lamar CISD's Hybrid ModelLamar CISD's Hybrid Model22
33 Content ManagementContent Management
Agenda
Device ManagementDevice Management
iOS Progress
555533332222 4444
App storeApp storeiPhone iPhone Configuration Configuration UtilityUtility
Multiple iTunes Multiple iTunes Accounts on a Accounts on a devicedevice
Native MDMNative MDMWireless App Wireless App Distribution*Distribution*
PC FreePC FreeiCloudiCloudPush Apps*Push Apps*
4444
Supervise ModeSupervise ModeForce HTTP ProxyForce HTTP ProxySet WallpaperSet Wallpaper
User Configuration
Device Settings
Security
Restrictions
Apple's VersionDevice Management
User Configuration
Device Settings
Security
Restrictions
Apple's VersionDevice Management
• WiFi
• Passcode
• Web Clips
User Configuration
Device Settings
Security
Restrictions
Apple's VersionDevice Management
• WiFi
• Passcode
• Web Clips
• Exchange
• LDAP
• VPN
Apple's Version
User Configuration
Device Settings
Security
Restrictions
Device Management
• Exchange
• LDAP
• VPN
• WiFi
• Passcode
• Web Clips
• Web,YouTube, App Store
• Camera, FaceTime, iCloud
• Content Ratings
Apple's Version
User Configuration
Device Settings
Security
Restrictions
Device Management
• APN
• SCEP
• x.509 Certificates
• Web,YouTube, App Store
• Camera, FaceTime, iCloud
• Content Ratings
• WiFi
• Passcode
• Web Clips
• Exchange
• LDAP
• VPN
iPhone Configuration Utility
MDM PlatformMDM Platform
Security
VPP Manageme
nt
Auditing
iPhone Configuration
Utility
Enterprise Management
‣ Users can delete MDM profile
‣ Device can be wiped
‣ No REAL app management
‣ Cost
MDM Limitations
JAMF Casper Suite
$50,000 per year
Custom MDM Solution
LCISDLCISDMDMMDMMerakiMeraki WordPressWordPress
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
Meraki
‣ Hosted (can be a philosophical limit)
‣ No Directory Services Support (LDAP)
‣ Cost
Meraki Limitations
WordPress
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
WordPress Custom Plugin
Tagging
GroupGroup VPPVPPPersonalPersonal
iTunes
11 3322
Content Management
GroupGroup
VPPVPP
PersonalPersonal11
33
22
Account Types
GroupGroup
VPPVPP
PersonalPersonal11
33
22
‣What everyone usesWhat everyone uses
‣Sync multiple PERSONAL Sync multiple PERSONAL
devicesdevices
‣Can purchase appsCan purchase apps
‣iTunes is built around thisiTunes is built around this
‣What everyone usesWhat everyone uses
‣Sync multiple PERSONAL Sync multiple PERSONAL
devicesdevices
‣Can purchase appsCan purchase apps
‣iTunes is built around thisiTunes is built around this
Account Types
GroupGroup
VPPVPP
11
33
22 ‣Sync multiple devicesSync multiple devices
‣Can't pay for appsCan't pay for apps
‣Sync multiple devicesSync multiple devices
‣Can't pay for appsCan't pay for apps
PersonalPersonal
Account Types
VPPVPP
11
33
22
‣Apple's answer to Apple's answer to
enterprisesenterprises
‣Difficult to manageDifficult to manage
‣FULL OF HOLESFULL OF HOLES
‣All we have...All we have...
‣Apple's answer to Apple's answer to
enterprisesenterprises
‣Difficult to manageDifficult to manage
‣FULL OF HOLESFULL OF HOLES
‣All we have...All we have...
PersonalPersonal
GroupGroup
Account Types
Apple Volume Purchase Program
Program Manager
Program Facilitator
s
End Users
Enterprise Management
AppsUser Content
PolicySecurity
Content ManagementContent Management
Device ManagementDevice Management
AppsUser Content
PolicySecurity
Content ManagementContent Management
Device ManagementDevice Management
Enterprise Management
Content ManagementContent Management
Device ManagementDevice Management
MDM PlatformMDM Platform
Holy Grail???
NOT YET
‣Purchases are still treated Purchases are still treated
as consumablesas consumables
‣Purchases are NOT linked to Purchases are NOT linked to
an accountan account
‣Not purpose builtNot purpose built
HolesHoles
‣Districts can ATTEMPT to Districts can ATTEMPT to
complycomply
‣Tax FreeTax Free
‣Volume DiscountsVolume Discounts
What Works
Volume Purchase Program
MDM VPP Management
MDM VPP Management
MDM VPP Management
MDM VPP Management
iCafe Approach
‣ Link the Apple VPP process with district processes
‣ Manage programs not devices
‣ Enable a small number of people to manage thousands of apps
‣ Maintain ownership of app purchases
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iCafe Approach
iPadiPad
Group
VPP/Wordpress
MDM/Wordpress
A Hybrid Approach
Personal
???
Questions
