Enrollment types

In order to manage iOS devices in Relution, they must first be enrolled. This enrollment process can be done in three different ways. The enrollment types differ and have a lasting effect on the later functions.

Manual enrollment #

This enrollment is performed by manually downloading and installing an MDM profile on the devices. This requires either scanning a QR code on the devices or manually accessing the corresponding URL. Subsequently, the MDM profile must be installed on the devices.

Advantages #

• This enrollment can be performed without having to reset the devices to factory settings.

Disadvantages #

• The enrollment can be removed at any time in the settings on the devices (MDM profile).
• Only partially suitable for BYOD devices, as administrators can see which apps are installed.
• Not all actions and policy configurations are possible.
• Devices are only supervised (supervised mode) if they have been prepared with Apple Configurator beforehand.

Manual enrollment →
Supervised Mode / Supervision →

Automated Device Enrollment (ADE) #

The iOS devices connect to the Apple server at startup and, if they have been assigned to the MDM server for Automated Device Enrollment (ADE, DEP in the portal) in Apple School/Business Manager, are automatically redirected to the MDM server and enrolled. This process can be forced so that users cannot skip it. Similarly, the Apple shared iPad feature can be enabled and the MDM profile on the devices can be protected from deletion. This requires access with appropriate permissions for Apple School/Business Manager. Relution always sets up devices enrolled via ADE in supervised mode.

Advantages #

• Enrollment is largely automatic.
• Devices are protected against theft.
• The enrollment (MDM profile on the device) can be protected against removal. To do this, the option User may remove MDM Enrollment must be disabled in the profile for ADE before enrollment (enabled by default).
• Devices are in supervised mode.
• Apple shared iPad (Shared iPad) can be enabled.

Disadvantages #

• Devices must be reset to factory settings beforehand. Devices already in use can be added to Apple School/Business Manager retroactively, see Add to ADE retroactively →. A method without data loss is described in Supervising retroactively →.

For automatic enrollment →
Profile for ADE →

Enrollment via Apple User Enrollment #

This is the typical enrollment for Bring Your Own Device (BYOD) devices. Users can enroll themselves and iOS devices do not need to be reset to factory defaults. There is an account-based and a profile-based variant. The profile-based variant is no longer supported as of iOS 18.

Advantages #

• Administrators cannot view privately installed apps.
• Devices remain under user control.

Disadvantages #

• Not all actions and policy configurations are possible.
• Managed Apple Accounts (Managed Apple ID in the portal) are required.
• Supervised devices (supervised mode) cannot be enrolled via User Enrollment.

User Enrollment →