What’s New in Managing Apple Devices

If you manage iPads or Macs at any sort of scale, then do watch this video from WWDC: What’s New in Managing Apple Devices.

Here’s a summary of some of the cool stuff that made me particularly happy…

No Apple IDs to install apps

If an iPad is Supervised (set up with Apple Configurator or DEP), you will be able to push out apps via your MDM without the need for an Apple ID on the device.  Which is pretty cool!  The app gets assigned to the device rather than a person.  The installation, updating and management are all controlled by your MDM.

Push out iOS updates

In iOS9, you will be able to push out iOS updates.  This is good news for me, as I’m still trying to get teachers to update their iPads from iOS7!  Via an MDM, you will be able to schedule updates to happen, e.g. when the device is plugged in at night.

Fix wallpaper, passcode and device name

A new MDM restriction means you will be able to lock the wallpaper, prevent a user from adding a passcode and stop the device name being changed.  This is very handy for shared devices in a cart-based deployment.

New Apple Configurator 2

They’ve ditched having a database (that gets very big and is prone to corruption) and are instead keeping ‘tags’ stored on the devices themselves.  The demo looked quite nice and I can see it being handy for those synced-via-cable cart deployments.  Apparently, you can also enrol a device via DEP using Configurator too, meaning a lot less tapping on devices.

There were lots of other nice features, so do watch the video or read a summary here (Amsys) or here (Enterprise iOS).

I like the fact that Apple are no longer insisting that the best and only way to use iPads in a school is 1:1, but are rather accepting that having a shared cart of iPads might actually be ok and are providing tools to help manage iPads in that way.

It’s a shame I won’t get to play with this stuff until we’re substantially into the new academic year, but I guess that is the life of an educational technologist these days!

Casper Suite

We’ve just had Casper Suite installed at my school. Part of the installation process is a three-day ‘Jump Start‘ where a highly experienced trainer (in our case, two, as we had someone shadowing) guides you through installing the software and the processes involved in setting up and running it.

So why Casper suite? Over the years, we’ve ended up using a range of different systems and technologies to manage the Macs and iPads in school. The Macs have been managed with an OSX Server running Workgroup Manager, plus a few scripts written by our Apple Reseller and the use of Munki for managing software installs and updates. With iOS, we’ve used Meraki, making use of the VPP programme and managed distribution, as well as Apple Configurator for class sets of iPads.

This has worked pretty well, but I knew we needed to move away from Workgroup Manager. Since 10.7 Lion, Apple has pushed the use of Configuration Profiles instead of Managed Preferences. Technology-wise, it isn’t a straight swap, as there are things you can do with MCX that you can’t do with profiles, and vice versa. But with 10.10, Workgroup Manager no longer even exists (even though the 10.9 version still works!), so I knew we had to do something. Casper suite was well spoken of, properly supported OSX as well as iOS, and seemed to have some cool features.

The main drawback of Casper Suite is the cost: as an educational customer, you only pay for support per device, which works out pretty cheap. But you have to pay for the three days of ‘Jump Start’ before you begin, which is not cheap! However, I calculated that it works out about the cost of a case per device, which isn’t so bad. An iPad without a case is pretty hobbled, and I’m sure Casper will add a depth and richness to our deployment.

The Jump Start went pretty well, and we managed to get everything working by the end of the three days. I did finish the three days feeling overwhelmed with everything there is to do (sorting out all the configuration of the Macs then imaging them all, plus redoing all the iPads), but I think it will come together over the next half term.

Here are some of the highlights so far:

  • Casper Focus: allows a teacher lock all the iPads in a class to a particular app or webpage
  • Self service: dishing up apps, books and in fact most things to users
  • Deployment Enrollment Programme (DEP): iPads get automatically enrolled to Casper and tied to a certain user out of the box
  • Composer: a powerful way to package up Mac apps, including the ability to fill the user template and existing users’ preferences
  • JSS: the fact it runs as a web service, meaning that Macs don’t have to be bound to an OSX server any more
  • JAMF Nation: a community of helpful geeks who are there to help find solutions to problem

I’m not sure it’s the right solution for small primary schools, or places without an onsite Mac geek, but I think it’s going to work really well for us.