Over the course of this chapter, we spent a lot of time investigating Apple Configurator. We discussed the Prepare mode, which can make lightweight, one-off changes as per your need. Supervision and user check out or assignment sets up long-term management "chaperone" relationships with iOS devices. We went over how Apple Configurator distributes the older version of VPP app codes and how it can lock the device into an app. As Activation Lock helped to make a device's theft become less effective, supervision also provided a safety net for institutions by allowing them to reclaim devices via the Recovery mode. We also reminded you that before evaluating an MDM, many restriction-related features are actually available to ActiveSync as an alternative.

For security professionals, it may seem like Apple is clueless about the needs of large enterprises, and Apple Configurator may not help with that impression. But by providing best practices we're left with the most supportable management...