What most administrators don’t realize is that by “default” what you can control on the Apple iOS devices is very limited out of the box. Large enterprises get around this by using Mobile Device Management (MDM) platforms, like Mosyle.
Unfortunately, the idea of an MDM for smaller organizations limited with funding, individuals or non-profits is not within reach. The good news is there is an alternative, and it’s the same technology that these MDM’s are built on – Apple Configurator.
🛡️ CleanBrowsing: Internet Safety Made Simple
Filter harmful websites, block adult content, and protect your entire network. All with fast, privacy-respecting DNS.
Start Filtering Here →As the name implies, the Apple Configurator allows you to enable and disable features you might otherwise be unfamiliar with. For instance, if you want to disable the ability to use a VPN on a device, this is the best way to do it. Or maybe limit what a user can do in their network settings, this is where you would do it.
Additionally, you will want another tool – iMazing Profile Editor. This is going to allow you to make changes to existing profiles, which will be important when you download the profile we issue you in our dashboard.
Supervised vs Unsupervised Mode
Before you begin, let’s take a minute to touch on the differences of Supervised vs Unsupervised Mode. Unsupervised mode gives you limited control, while Supervised mode gives you full control. We recommend supervised mode where possible, but below is a table to help think through the differences:
| Supervised Devices | Unsupervised Devices |
|---|---|
| Devices can be protected against Factory Reset | Devices can be Factory Reset anytime |
| Airdrop can be restricted | Airdrop cannot be restricted |
| Individual Apple iDs not needed for enrollment | Each device needs an Apple iD for enrollment |
| Unenrollment from MDM is not possible | Unenrollment from MDM is possible |
| Silent App installation is possible | App installation requires user confirmation |
| Web content can be filtered | Web content cannot be filtered |
| App notifications can be controlled | App notifications cannot be filtered |
| The device can be run in Kiosk mode | The device cannot be run in Kiosk mode |
| TouchID can be restricted | TouchID cannot be restricted |
| iMessage can be restricted | iMessage cannot be restricted |
| Screentime can be restricted | Screentime cannot be restricted |
| Homescreen wallpaper and lock screen message can be configured by Admin | User can customize Homescreen wallpaper and lock screen message |
| Global HTTP Proxy can be configured | Global HTTP Proxy cannot be configured |
| Game Center Access can be controlled | Game Center Access cannot be controlled |
How To Configure iOS Devices in Supervised Mode
Special thanks to our customer and user Jared for sharing updates to the configuration process.
Step 1: Configure iOS Device in Supervised Mode
The following steps can be used with any iOS device. Follow these steps to put the device into supervised mode:
1 – Start Apple Configurator
2 – Plug the device you want to manage using your USB / USB – C cable to the device with Apple Configurator installed
3 – From the Action menu, choose prepare
4 – Prepare with “Manual Enrollment” and make sure “Supervise Devices” is selected. Next (Note: This step will erase the connected phone)