Home > Enterprise Mobility Management > Profiles and Settings > iOS Supervision

iOS Supervision

Device supervision is an important concept to understand when enrolling iOS devices in an EMM solution like Systems Manager. Supervising your iOS devices allows Systems Manager to manage many additional device settings, like locking a device into a single app, specifying a homescreen layout, or restricting access to additional apps like iMessage.

Enrolling your devices in supervised mode is typically recommended if your devices are organization-owned, or if you want to have deeper levels of control over your devices. Note that supervising a device requires either setting up devices as new, or factory resetting existing devices. 

Device Enrollment Program (DEP) 

Note: DEP can be used to enroll devices without supervision as well, while still automating MDM enrollment during the device setup process.

DEP allows you to permanently manage your organization's macOS and iOS devices. Your devices need to qualify with Apple's program to use this method, but it grants you the most control over your devices. For example, DEP allows you to make MDM enrollment mandatory and unremovable, and also automates enrollment into Systems Manager so that it happens automatically during the initial device setup.

Please reference our DEP deployment guide for information on how to link your account and supervise devices with DEP.

Apple Configurator 

Apple Configurator can be used to bulk configure and deploy iOS devices that do not qualify for DEP. This method requires connecting your iOS devices to a Mac to supervise.

Please reference our documentation for instructions on using Apple Configurator 2.0 and laterApple Configurator 1.5, or Apple Configurator 1.4 and earlier.

Supervised Settings

Systems Manager supports additional restrictions and settings payloads on supervised devices. For example, the iOS supervised restrictions can be accessed by navigating to Systems manager > MDM > Settings, clicking + Add Settings and selecting Restrictions.

Additional iOS settings payloads like Wallpaper, Education, Home screen layout, or Notifications also require devices be supervised. For more info on specific settings, review the Configuration Settings article.

Notes

  • If the profile contains only Device functionality under iOS supervised restrictions and is pushed to a non-supervised device, the profile will still deploy, but these 'supervised' restrictions will simply be ignored by the device.
  • If the profile contains any other restrictions under iOS supervised restrictions (ie. Single App Mode, Web content filter, etc.) or supervised payloads and is pushed to a non-supervised device, the entire settings profile may fail to deploy to the device (an error will report on the client's 'activity log'). The restrictions must be removed, or the device must be supervised, in order for the settings profile to properly deploy.  

     
  • The client's details page will report whether or not the device is supervised:

 

You must to post a comment.
Last modified
10:48, 26 Jul 2017

Tags

Classifications

This page has no classifications.

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community