Expanded DEP now available in 26 countries
Four-hour turnaround for replacement devices
New features of DEP
Enrollment optimization - Keeps the device in Setup Assistant until MDM enrollment completes.
DEP will send a DeviceConfigured command to the device, to let it know it can now exit Setup Assistant
Available for 10.11 / iOS 9
Prevent user account creation
Set passcode policy
Create standard user account
Setup Assistant will also create admin account in the background.
- optionally hidden
Standard user is created by Setup Assistant, (possibly hidden) admin user is available for remote administration.
Additional panes can be removed from Setup Assistant
Android Migration <- new option to remove
Equivalent to Storebag from iTunes Store
Informs tools what info they can obtain from your server
Three different ways of purchasing apps
VPP Redemption Codes
VPP Managed Distribution
VPP expanded to 26 countries (matches DEP)
Multinational app assignment
Purchase app in any of the 26 covered countries, can distribute them across other covered countries as long as app is available in that nation's app store. Buy in France, distribute to users in the US and Britain.
Device app assignment
No Apple ID required on the device
No invitation process
For App developers
Support device assignments
- Opt in
- Update recipt checking
Store app data in the cloud
- Your own cloud solution
Change to Caching Server in El Capitan
Preheat cache of iCloud data on local network
Data will be encrypted
iCloud Drive documents
iCloud Photo Library photos
Translation: Give your Caching Server more storage. MOAR.
MDM Developers: InstallApplication
Installs app if not installed
Updates app if installed managed
Migrate user to device assignment without reinstalling or losing user data
Convert unmanaged to managed without reinstalling or losing user data
Install via MDM or Configurator with the App Store set to be disabled
Enterprise in-house apps:
New explicit user trust flow for apps
Prevent users from trusting apps
Apps installed via enterprise's MDM do not require explicit user trust
Can provide the same metadata for apps that can be provided for App Store-provided apps. Coming later this summer.
For new settings discussed above, take a look in El Capitan's Profile Manager.
New MDM commands and queries (iOS)
Available Software Updates
Update to iOS (DEP devices only)
- Download and stage the update, for later installation
Modify device name, passcode, wallpaper
Pair with Apple Watch
Network Usage Rules
OS X Server Account
Mail: Mail Drop
New MDM commands and queries (OS X)
Available Software Updates
Install Software Updates (DEP Macs only)
Configure ethernet proxy
Login window - disable account migration
Note: Recommend that readers of these notes make time to review the session video, they went through the new MDM commands, restrictions and queries pretty fast.
DEP and VPP Simulators
Simulate DEP and VPP services
Test handling of service errors
Available for download on developer portal
New revs this week support the new iOS 9 / El Capitan features
Rewritten; now Apple Configurator 2
New interface puts the connected iOS devices front and center
Easy automation - combine tasks into workflows
Companion to DEP and MDM server
Tasks available from the Actions menu in Configurator 2.
Configurator no longer maintains a database of applications. iOS applications can stored as files on the Mac's filesystem, in iCloud, on network storage, etc, and Configurator can select them as files and use them.
Command line tool for managing Configurator 2, will be covered in an automation session on Thursday.
Apple Configurator 2 beta available now.