Apple’s devices are preferred by organizations and employees because of their easy-to-use and high-performing operating system and the beautiful user experience they offer. But what follows is the crucial task of managing these company-owned Apple devices. It is essential to channel the device used for business-specific operations to increase productivity and safeguard company data simultaneously to reduce unnecessary data costs.
To implement a successful MDM strategy for Apple devices, it is essential for IT admins to have total control over the company-owned Apple devices.
Say hello to iOS Supervised Mode!
To gain complete control and to allow your MDM tool to function at its optimum best, it is necessary to ‘supervise’ the Apple devices like iPhones and iPads. iOS supervision is available for devices having iOS 5 and above.
What is iOS Supervised Mode? Why is it necessary?
Supervision is that differentiating element for iOS that helps the IT admin to understand whom to provide total control and ownership of the devices. Once the device is in supervised mode, it is ready to be enrolled in any desired iOS MDM solution.
iOS supervision gives companies control over company-owned devices, which is a prerequisite to managing them further. Without supervision, functionalities like Factory Reset, Airdrop Sharing, iBooks, Find my iPhone, and iMessage cannot be managed within an Apple device. Other important settings like Bluetooth and GPS, for example, can be overridden by the end-user.
In simple words, this means that the admins cannot enforce company policies on unsupervised iPhones. An admin can opt for an intuitive MDM tool and push policies and restrictions on iPhones and iPads, but the end-user will continue to have the option to exit, override or even totally erase the policies.
Imagine this happening to a company-owned Apple device wherein the company data will be under continuous threat because it can be shared or manipulated openly by the device user. A user can perform a factory reset on an unsupervised device, which can be used for personal purposes.
Hence, opting for iOS supervision on company-owned Apple devices is vital.
There are two methods of supervising iOS devices:
- Using Apple DEP (Apple Device Enrollment Program)
- Using Apple Configurator 2
What are the benefits of iOS Supervision Mode?
iOS supervision unleashes the core capabilities of a Mobile Device Management solution for an Apple device. Without iOS supervision, the device can only be partially managed, making the device vulnerable to all possible threats, including data breaches and device theft.
The top benefits of iOS Supervision Mode include:
- The device can be enrolled into an MDM solution before handing it over to the end-user
- Factory Reset Protection can be enforced
- Business-specific applications can be pre-loaded or can be silently pushed onto the devices
- The home screen layout can be configured to align with the company branding
- iOS updates can be pushed remotely, ensuring the smooth functioning of devices and apps
- Granular-level settings of the devices can be controlled and customized
Essentially, iOS supervision is the best way to start managing Apple devices. Driven for business use, these devices can then be further configured with an MDM solution.
iOS Supervised vs Unsupervised Devices
It is important to note that ‘Supervision’ and ‘Enrollment’ are two different operations performed on an Apple device. iPhones and iPads can also be enrolled in an MDM solution without supervision. As stated above, supervision plays together with an MDM solution to manage a device. Unsupervised devices can be managed, but only to a certain extent. For companies that want to apply policies on devices, supervision is the best way to go about it.
Here’s a simple table explaining the comparison between supervised and unsupervised devices:
| Supervised Devices | Unsupervised Devices |
| Devices can be protected against Factory Reset | Devices can be Factory Reset anytime |
| Airdrop can be restricted | Airdrop cannot be restricted |
| Individual Apple IDs are not needed for enrollment | Each device needs an Apple ID for enrollment |
| Unenrollment from MDM is not possible | Unenrollment from MDM is possible |
| Silent App installation is possible | App installation requires user confirmation |
| Web content can be filtered | Web content cannot be filtered |
| App notifications can be controlled | App notifications cannot be filtered |
| The device can be run in Kiosk mode | The device cannot be run in Kiosk mode |
| TouchID can be restricted | TouchID cannot be restricted |
| iMessage can be restricted | iMessage cannot be restricted |
| Screentime can be restricted | Screentime cannot be restricted |
| Homescreen wallpaper and lock screen messages can be configured by Admin | Users can customize the Homescreen wallpaper and lock screen message |
| Global HTTP Proxy can be configured | Global HTTP Proxy cannot be configured |
| Game Center Access can be controlled | Game Center Access cannot be controlled |
A supervised iOS device coupled with a robust MDM can safeguard your enterprise mobility. Supervise your company-owned iPhones and iPads and enroll them in Scalefusion MDM – a full-blown Apple MDM solution that helps you manage devices, enforce company policies and protect data while increasing employee productivity.
