240 likes | 386 Vues
This session addresses the challenges and considerations of managing iPads in educational settings, specifically within the Rapides Parish School District. With over 600 iPads implemented across 52 schools, we explore key management strategies, addressing security, lost or stolen devices, content filtering, and asset management. Discussion includes Mobile Device Management (MDM) solutions, configuration policies, and BYOD practices. Participants will gain insights on enhancing security, streamlining operations, and ensuring efficient use of iPads to support both faculty and students in a 1:1 classroom environment. ###
E N D
iPads Everywhere! Management Considerations for the EnterpriseBill Morrison Director of Technology, Rapides Parish School District bill.morrison@rpsb.us
Our Session Today • Not technical Apple – iOS devices • Managing all those iPads • Things to consider • Things that can be a challenge • Ideas for further research
Rapides Parish School District • 52 Schools • 600 iPads in first year • Administrators • Faculty • Classroom 1-1 • School Based Carts
Topics for today… • Security • Management/Apps • Networking • Lost/Stolen Devices • Content Filtering • Asset Management • Configuration and Policies (BYOD) • Bandwidth
Policy & Faculty BYOD • All district-owned devices are managed • Greatest risk is lost or stolen devices • Potential exposure of confidential information • Unmanaged BYOD devices are only allowed to access the guest networks • To access district network, device must be managed • Important to have a written policy for faculty BYOD
So how can we manage mobile devices? • Non-enterprise • Apple sync cart • Sync with single iTunes account OTA • Both have disadvantages • Enterprise • Apple Configurator • Mobile Device Management
Apple Configurator • Apple Configurator – Lion Server • Prepare devices • Apply a one-time, standard configuration • Good for faculty/staff one-time configuration • Supervise devices • Apply a configuration and then reapply after use • Good for shared devices, checkout, labs, etc. • Assign Devices • Configure devices for a specific user and keep backups of the user’s data. • Good for one user using multiple devices • Disadvantages of AC • Prepared devices are easily reconfigured by user • Apps are tied to the computer from which they were installed, not an iTunes account • Doesn’t communicate real-time with device
Mobile Device Management (MDM) • Brings enterprise management to iOS for managing configuration, security and apps • Apples supports third-party MDM servers • Absolute Software • Meraki (free) • JAMF Casper Suite
Mobile Device Management • Mobile Device Management Server • Over the Air Enrollment (OTA) • Install management app OTA that establishes connection to the MDM server • Apple Push Notification (APN) • MDM server sends background signal to iOS device through the APN • Maintains contact with device • Configuration Profiles • Push your configuration out to multiple devices
Configuration Profiles • Accounts • Email, Wi-Fi, VPN, calendar systems • Passcode Policies • Require, complexity, age, failed attempts • Security/Privacy • Encryption based on passcode • Restrictions • Installing apps, Siri, Facetime, camera, screen capture
More Configurable Options • Application Restrictions • Disable YouTube, Safari, iTunes store, allow/deny specific apps • Set ratings for music, content, podcasts • Allow/restrict iCloud
Asset Management • MDM allows querying of devices • Device information such as iOS version, warranty, serial number, capacities • Some MDM systems allow custom fields such as asset tag number, group, organization, etc. • Network information • Applications installed • Volume Purchase Plan codes • Plan your volume purchase/iTunes account structure
App & Data Management • Deploy in-house apps directly • Send suggested apps for users to op-in • Manage Apple Volume Purchase Program codes and distribute them based on various criteria • Managed apps and data can be removed protecting personal data • Prevent backups of managed app data • Send web clips and documents to users
Lost or Stolen Devices • Issue remote lock • Send message to device • Remove configuration profiles • Reset lost/forgotten passcodes • Locate device on map* • Remote wipe
Other Management • Assign devices to groups for management • Monitor network access by IP • Smart reports
Security Considerations • For faculty/staff devices, require complex passcodes • Enable erase data • Do not store open passcodes – use an app like Keypass or others to store passwords • Enable Safari security • Limit location services • Enable encryption where possible
Bandwidth • Restrict bandwidth on guest networks • All unmanaged devices connect only through guest • All student-owned devices connect only through guest • BYOD and mobiles have not had a huge impact • Large high school with 800+ BYOD connections resulted in a +4mb bandwidth use
Recommendations • Set up Apple Volume Purchase • For few iPads that don’t go home, iTunes management • If you don’t want continuous management, Apple Configurator • For large deployments, MDM brings enterprise management • Deploy and image with Apple Configurator • Manage with MDM
Resources • Apple • Mobile Device Management • Apple Configurator • http://www.apple.com/education/resources/information-technology.html • Absolute Software • Mobile Device Manager • BYOD Whitepaper • Meraki • Systems manager • JAMF Casper Suite