Apple’s devices are preferred by organizations as well as employees because of their easy-to-use and the high-performing operating system, as well as the beautiful user experience they offer.
But what follows is the crucial task of managing these company-owned Apple devices.
It is important to channelize the device use for business-specific operations, to increase productivity and safeguard company data simultaneously to cut down the unnecessary data costs.
To implement a successful MDM strategy for Apple devices, it is extremely important for the IT admins to have total control over the company-owned Apple devices.
Say hello to Supervision!
To gain full control and to allow your MDM tool to function at its optimum best, it is necessary to ‘supervise’ the Apple devices like iPhones and iPads. iOS supervision is available for devices having iOS 5 and above.
What is iOS supervision? Why is it necessary?
Supervision is that differentiating element for iOS that helps the IT admin understand who is to provide total control and ownership of the devices. Once supervised, the device can be enrolled in any desired iOS MDM solution.
iOS supervision gives companies control over company-owned devices, which is a prerequisite to managing them further.
Without supervision, functionalities like Factory Reset, Airdrop Sharing, iBooks, Find my iPhone, and iMessage cannot be managed within an Apple device. For example, the end-user can override other necessary settings, like Bluetooth and GPS.
In simple words, this means that the admins cannot enforce company policies on unsupervised iPhones. An admin can opt for an intuitive MDM tool and push policies and restrictions on iPhones and iPads, and apply features like iPad kiosk mode, but the end-user will continue to have the option to exit, override, or even totally erase the policies.
Imagine this happening to a company-owned Apple device, wherein the company data will be under continuous threat because it can be shared or manipulated openly by the device user. A user can perform factory reset on an unsupervised device, which can further be used for personal purposes.
Hence, opting for iOS supervision on company-owned Apple devices is vital.
There are two methods of supervising iOS devices:
- Using Apple DEP (Apple Device Enrollment Program)
- Using Apple Configurator 2
What are the benefits of iOS supervision?
iOS supervision unleashes the core capabilities of a Mobile Device Management solution for an Apple device. Without iOS supervision, the device can be only partially managed, making it vulnerable to all possible threats, including data breach and device theft.
The top benefits of iOS Supervision include:
- The device can be enrolled into an MDM solution before handing it over to the end-user
- Factory Reset Protection can be enforced
- Business-specific applications can be pre-loaded or can be silently pushed onto the devices
- Home screen layout can be configured to align with the company branding
- iOS updates can be pushed remotely, ensuring the smooth functioning of devices and apps
- Granular-level settings of the devices can be controlled and customized
Essentially, iOS supervision is the best way to start managing Apple devices. Driven for business use, these devices can then be further configured with an MDM solution.
Supervised vs Unsupervised Devices
It is important to note that ‘Supervision’ and ‘Enrollment’ are two different operations performed on an Apple device. iPhones and iPads can be enrolled in an MDM solution without supervision as well.
As stated above, supervision plays together with an Apple MDM solution to manage a device. Unsupervised devices can be managed, but only to a certain extent. For companies that want to apply policies on devices, supervision is the best way to go about it.
Here’s a simple table explaining the comparison between supervised and unsupervised devices:
| Supervised Devices | Unsupervised Devices |
| Devices can be protected against Factory Reset | Each device needs an Apple ID for enrollment |
| Airdrop can be restricted | Airdrop cannot be restricted |
| Individual Apple iDs not needed for enrollment | Each device needs an Apple iD for enrollment |
| Unenrollment from MDM is not possible | Unenrollment from MDM is possible |
| Silent App installation is possible | App installation requires user confirmation |
| Web content can be filtered | Web content cannot be filtered |
| App notifications can be controlled | App notifications cannot be filtered |
| The device can be run in Kiosk mode | The device cannot be run in Kiosk mode |
| TouchID can be restricted | TouchID cannot be restricted |
| iMessage can be restricted | iMessage cannot be restricted |
| Screentime can be restricted | Screentime cannot be restricted |
| Homescreen wallpaper and lock screen message can be configured by Admin | User can customize Homescreen wallpaper and lock screen message |
| Global HTTP Proxy can be configured | Global HTTP Proxy cannot be configured |
| Game Center Access can be controlled | Game Center Access cannot be controlled |
A supervised iOS device coupled with a strong MDM can safeguard your enterprise mobility.
Supervise your company-owned iPhones and iPads and enroll them in Scalefusion MDM – a full-blown MDM solution that helps you manage devices, enforce company policies, and protect data while increasing employee productivity.
Also read: Industry Use Cases of iOS Device Management
FAQs
What’s the difference between supervised and unsupervised iOS devices?
Supervised iOS devices offer enhanced management controls for IT admins, including restrictions, silent app installs, and remote actions. Unsupervised devices have limited management capabilities and are more suited for personal or BYOD use. Supervision is ideal for corporate-owned devices needing strict policy enforcement.
Why supervise iOS devices for business?
Supervising iOS devices unlocks advanced management features crucial for business use, like restricting app access, enforcing security policies, silently installing apps, and preventing data leaks. It ensures greater control, making it ideal for managing corporate-owned devices securely and efficiently.
How do I supervise an iOS device?
To supervise an iOS device, enroll it through Apple Business Manager (ABM) or Apple School Manager (ASM) and link it to your Mobile Device Management (MDM) solution, like Scalefusion. Devices must be factory reset before supervision takes effect during the setup process.
Is supervision worth it for personal devices?
Supervision is generally not recommended for personal devices, as it grants complete control to the MDM administrator. It’s best suited for corporate-owned devices requiring strict management and security policies.
Is supervision worth it for personal devices?
Supervision is generally not recommended for personal devices, as it grants complete control to the MDM administrator. It’s best suited for corporate-owned devices requiring strict management and security policies.
