Chapter 4. Organizational Controls

Now, we'll move on to explore the concepts involved in managing iOS devices from a central location on-premises. This includes device supervision, Activation Lock, Single App Mode, and more basic options presented by the old stalwart, ActiveSync. For most of the time, we will be looking at a tool called Apple Configurator that is developed by Apple. We consider it to be one of the easiest tools to recommend for environments that need more hands-on control when officially supporting iOS, either when migrating to a BYOD (short form for bring your own device) environment or in conjunction with an MDM. It fits a couple of specific workflows very well and has some features that are vital for hardening devices.

Besides Apple Configurator, which at the very least can provide a good reference for showing Apple's acknowledged use cases for starting with device management, we will also introduce Apple's Device Enrollment Program or DEP. Activation...