[ER] A setting to prevent un-enrolling a device from MDM

Originator:fraserspeirs
Number:rdar://9806432 Date Originated:2011-07-20
Status:Open Resolved:
Product:iPad Product Version:5.0b3 (and earlier)
Classification:Enhancement Reproducible:Always
 
Summary:

I manage iOS devices for a school and want to use Lion Server to manage them. As it stands, I can't prevent pupils from removing their devices from MDM control.

Steps to Reproduce:

1. Enroll a device in Lion Server's Profile Manager.

Expected Results:

Expected that there would be a way to prevent removal of the enrolment profile without authorisation.

Actual Results:

No such control exists.

Regression:

Also true in current releases.

Notes:

I manage 110 iPads in a 1:1 deployment at the school I work in. The iPads are owned by the school. If pupils can simply remove their enrolment profile, the device then becomes unmanaged and we have a problem.

I understand that, in general, enrolling in MDM is something that should be under a user's control but there are circumstances where the institution needs this level of control over a device.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!