Enrollment types

Introduction

In order to manage iOS devices in Relution, they must first be enrolled. This enrollment process can be done in three different ways. The enrollment types differ and have a lasting effect on the later functions.

Manual enrollment

This enrollment is performed by manually downloading and installing an MDM profile on the devices. This requires either scanning a QR code on the devices or manually accessing the corresponding URL. Subsequently, the MDM profile must be installed on the devices.

Advantages

  • This enrollment can be performed without having to reset the devices to factory settings.

Disadvantages

  • The Enrollment can be removed at any time in the settings on the devices (MDM profile).
  • Only partially suitable for BYOD devices, as administrators can see which apps are installed.
  • Not all actions and policy configurations are possible.
  • Devices are often not supervised (supervised mode).

For manual enrollment →
Supervision →

Automatically via Apple DEP.

The iOS devices connect to the Apple server at startup and, if they are devices that have been enrolled in the DEP, are automatically redirected to the MDM server and enrolled. This process can be forced so that users cannot skip it. Similarly, the Apple shared iPad feature can be enabled and the MDM profile on the devices can be protected from deletion. This requires access with appropriate permissions for Apple School/Business Manager.

Advantages

  • Enrollment is largely automatic.
  • Devices are protected against theft.
  • Enrollment (MDM profile on the device) cannot be removed.
  • Devices are in supervised mode.
  • Apple shared iPad (Shared iPad) can be enabled.

Disadvantages

  • Devices must be reset to factory settings beforehand.

For automatic enrollment →
DEP profile →

Enrollment via Apple User Enrollment.

This is the typical enrollment for Bring Your Own Device (BYOD) devices. Users can enroll themselves and iOS devices do not need to be reset to factory defaults.

Benefits

  • Administrators cannot view privately installed apps.
  • Devices remain under user control.

Disadvantages

  • Not all actions and policy configurations are possible.
  • Managed Apple IDs are required.

Go to Apple User Enrollment for iOS →