Votes - 0, Average rating: 0
(
)
)
|
Other manuals for this model:
manual abstract
MDM servers can deploy both App Store apps and in-house enterprise apps to devices over
the air. Both paid and free App Store apps can be managed by an MDM server using Volume
Purchase Program (VPP) managed distribution. For more about managed distribution with MDM,
see the Volume Purchase Program Overview.
Installing VPP apps can occur in three ways:
• Users with a personal device are prompted by MDM to install the app from the App Store
using their Apple ID
• On organizationally-owned supervised devices enrolled with MDM, app installation
occurs silently
• Users with devices not associated with MDM install VPP apps by redeeming a purchase code
using their Apple ID
Managed apps can be removed remotely by the MDM server, or when the user removes their
own device from MDM. Removing the app also removes the data associated with the removed
app. If the VPP app is still assigned to the user, or the user redeemed an app code using a
personal Apple ID, the app can be downloaded again from the App Store, but won’t be managed.
iOS 7 added a suite of restrictions and capabilities to managed apps to provide improved
security and a better user experience:
• Managed Open In: Provides two useful functions for protecting your organization’s app data:
• Allow documents from unmanaged sources in managed destinations. Enforcing this
restriction prevents a user’s personal sources and accounts from opening documents in the
organization’s managed destinations. For example, this restriction could prevent a user’s
copy of Keynote from opening a presentation PDF in an organization’s PDF viewing app. This
restriction could also prevent a user’s personal iCloud account from opening an attachment
in an organization’s copy of Pages.
• Allow documents from managed sources in unmanaged destinations. Enforcing this restriction
prevents an organization’s managed sources and accounts from opening documents in a user’s
personal destinations. This restriction could prevent a confidential email attachment in the
organization’s managed mail account from being opened in any of the user’s personal apps.
• App Configuration: App developers can identify app settings that can be set when installed as
a managed app. These configuration settings can be installed before or after the managed app
is installed.
• App Feedback: App developers building apps can identify app settings that can be read from a
managed app using MDM. For example, a developer could specify a “DidFinishSetup” key that
an MDM server could query to determine if the app had been launched and set up.
• Prevent Backup: This restriction prevents managed apps from backing up data to iCloud or
iTunes. Disallowing backup prevents managed app data from being recovered if the app is
removed via MDM but later reinstalled by the user.
iOS 8 adds these management capabilities:
• Safari downloads from managed domains: Downloads from Safari are considered managed
documents if they originate from a managed domain. For example, if a user downloads a PDF
using Safari from a managed domain, that PDF complies with all managed document settings.
• iCloud document management: This restriction prevents managed apps from storing data
in iCloud. For example, data created or used by a managed app can’t be stored in iCloud,
however data created by users in unmanaged apps can be stored in iCloud.
Restricting third-party keyboards
iOS 8 supports Managed Open In rules that apply to third-party keyboard extensions. This
prevents unmanaged keyboards from appearing over managed apps.
Chapter 6 Configuration and management
53
...