Tuesday, 6 October 2015

What's new in iOS 9 management

 Apple's iOS 9 has very few new policies for managing iPhones, iPads, and iPod Touches. But there are some: Using a mobile device management (MDM) tool, IT admins can now force iOS updates and stage their deployment across supervised devices -- meaning corporate-issued devices under full IT control. BYOD items cannot have iOS updates forced or staged by IT.

iOS users are quick to update, so IT organizations really should join Apple's developer program so that they can test new iOS versions before they go live. But the new iOS controls let IT do that final check before implementing the update across all its corporate devices.

There are also new policies in iOS 9 to control whether devices can roam on cellular networks, to enable or disable screen recording, and to control whether they can use Apple's Mail Drop feature to send large attachments. (Mail Drop stores the documents in iCloud and send the recipient not using an Apple device a link instead to download the attachment from; Apple device users see the normal attachment in their email, even if it exceeds their email server's attachment-size limits, because Apple Mail reattaches the file automatically behind the scenes.)

For supervised devices only, there are new controls over Apple Watch pairing, the use of iCloud Photo Library, keyboard shortcuts, automatic app downloads, and News app setup. Those supervised policies are designed mainly for shared-use devices, such as in schools or retailers.

Also for supervised devices, IT can control users' ability to change the device name, password, and wallpaper. This new control is meant to address users who might use profanities or other inappropriate content; Apple's device management tools chief, Todd Fernandez, told developers at its Worldwide Developers Conference earlier this year that students and others have electronically defaced shared devices that way.

Apple's major changes in iOS 9 management focus on its Device Enrollment Program and Volume Purchase Program services. DEP is the service to manage fleets of supervised iOS devices and the in-house apps deployed to them, and VPP is the program to manage corporate apps from the App Store across that fleet of devices.

iOS 9 adopts the OS X approach to app management, whereby IT can associate a specific app to any number of devices and/or users, rather than managing each device's or user's apps independently. That change should simplify iOS app adminstration considerably.

Apple has also simplified how DEP catalogs apps, so IT can build an app library without having to poll all devices each time. Also, apps can now be installed on supervised devices even if the App Store is disabled on those devices.

In iOS 9, DEP can install in-house apps silently, without user confirmation -- the IT organization is treated as trusted developer out of the box now. Users will still have confirm direct DEP installation of corporate apps from other private developers, but once they have confirmed a developer's app, all future apps from that developer can be silently installed as well.

No comments:

Post a Comment