Anyone have kids with an ipad for school using Mosyle

Associate
Joined
22 Nov 2017
Posts
331
Afternoon all

My son is now in secondary school and we were aware before joining that the school operated a classroom ipad scheme where each child has an ipad. There was an option to buy one from the school but the correspondence stated that children could bring their own ipad in instead of buying one. My son has a relatively modern ipad and as such I did not see it necessary to buy another. What was less clear in the correspondence, which has only become apparent to me today, is that in two weeks time they are due to receive their ipads and have them set up, ipad owners will have theirs set up on the same day and the ipads must be brought in wiped.

This was not clear in the original correspondence and I understand that they install a piece of software called Mosyle which allows the school to restrict the apps that are available during class time, totally understandable. What is not clear is whether this means he can log in and use his personal apple log in and apps afterwards or are we left with an ipad that is effectively restricted and limited by the apps that the school allow.

Anyone familiar with this scenario?

Many thanks

Darren
 
Haven't used this particular app before, but I'd find it incredibly hard to believe that any app would require you to alter the Apple ID being used on the device. It shouldn't matter what Apple ID is used as long as the app can be installed, the school's IT/administration probably login with their credentials on the app and set the restrictions at software level from this.

Not sure how smart it is though... Does it know how to accomodate for sick days, bank holidays, school hols etc and not restrict the device? I mean it would make more sense if it also worked on location/geofencing when it was enabling restrictions (it might do for all I know :p).
 
Last edited:
I would double check and confirm with the school but iPadOS doesn't currently allow for true multi-user support (with differing Apple/iCloud ID's) and as Mosyle is a Mobile Device Management/MDM which in effect will bind the device to the school (i suspect they will use an organisation or a "managed" Apple ID with the device), it will be entirely up to them on what restrictions are placed on the device and whether or not you're allowed to freely install apps.
Typically you restrict app installs, along with a ton of other restrictions, for corp devices and i suspect the school will do the same here.

As said, double check with the school though.

* Just to add, there is a feature called "Shared iPad" but it's aimed at corp users and i don't believe you can attach consumer/"outsider" Apple/iCloud ID's with it.
 
Last edited:
Looks like its a standard apple MDM solution to me. I use a competitor called JAMF withing my job role for exactly the same kind of setup on school iPads.

I imagine what they will be doing is wiping, then enrolling, the iPad into this MDM, this will give them essentailly compelte control of the device being able to do restrictions, app install controls, and essentially control everything at device level with no way of overriding. In regards to signing in with a personal account, I have this completely blocked on most school iPads we provide. There's simply no need for a student to be signed into anything iCloud when we are pushing all the apps they require via that MDM. I'd wager they will do something the same.

The only difference should be the way it behaves when wiped. They will likely block the ability to use the "erase all content and settings" feature simply to stop students eaisly getting control of the device, but its how the devices behave when wiped that vary. All the devices we buy within our school are linked to "apple school manager". This is done by our resellers for us at the point of purchase. We provide them our school manager code, and they tie the serial numbers to our school manager at point of sale. We then use apple school manager to link them to jamf which does the actual controls. What this means is if someone were to steal one of our school iPads, plug it into a PC / MAc in recovery mode and wipe it (which can't be blocked no matter what). When it comes back to do the check with apple, it will still know it belongs to our school. No matter what you do it will check in with our MDM pull down all its settings and report its location agian. It uses the same technology as activation lock and theres simply no way around it.

We do have some odd old iPads reigstered that are not pre-loaded onto our school manager, and this is where things differ. You have to enroll those devices manually and how you do this has a couple of options. You can jsut do an on device enrollment. This is what I would hope your school would do really. The key difference with this is it can be wiped by the iPad user at any time simply by removing the management profile. You would loose all the managed apps / settings / wifi networks etc immediately, but ultimately you get control of the device back.

However, it's also possible to use a Mac app called apple configurator, to manually load a device into school manager. This then essentialyl acts as a proof of ownership of the device, and allows you to lock it down with activation lock in the same way. The only difference is you get a thirty day grace period where the profile can still be removed, and you can get ownership of it back. (see here https://support.apple.com/en-gb/guide/apple-school-manager/axm200a54d59/web). If you dont remove the management profile within 30 days, the iPad then becomes tied to the instutitions school manager, and even wiping the device via recovery, or DFU mode, wouldn't realease it.

The school could very easily release it for you. There is literally a large "release device" button within school manager so it's as simple as searching for the serial number and clicking this, it literally takes seconds. However, even with me being the admin of all of this I describe, I wouldn't dream of having my childs personal device enrolled in any of this.

At the minimum I'd be asking the school to provide exact specificaitons of the settings they are going to be applying. I'd want the full policies and list of restrictions they intend to apply to the iPad in detail. Down to every setting (will the camera be on / off, will the app store be available, cna I still change notificaiton settings etc) as apple MDM solutions allow you to configure pretty much everything about the iPad. Even home screen layout can be locked down. I'd also want clarity on if they are doing a device enrollment, or adding the device to school manager. Then I'd probably ask them for their full GDPR data protection impact assessment on what information they are storing / gathering on the personal iPads.

At this age though I just wouldn't want to mix a personal use iPad with a shool use iPad in this manner. I think we all know kids push the limit of what they should be doing on everything they have, and having a personal device, subject to this kind of school control, is a recepie for disaster. I'd go as far as saying if the school expect to be able to control the devices to this extent, they shoudl be paying for them. My schools certaily do....... We'd never dream of making a student pay for their own then try and take control of it. This is what BYOD wifi networks etc are for. You lock down what the device can access in other ways, not by actually extending the controls to peopels personal devices.
 
Thank you all for the responses, especially @BinnsY

This kind of is what is worrying me and ultimately what I will no doubt be finding out in the next week. I will be very angry if we as parents effectively have to buy or supply ipads that are totally restricted to school use.
 
This kind of is what is worrying me and ultimately what I will no doubt be finding out in the next week. I will be very angry if we as parents effectively have to buy or supply ipads that are totally restricted to school use.
Just ask why your personal device needs to be enrolled into their MDM and if given a list of apps needed for the curriculum, would it be acceptable to them if you were to (purchase and) install those on your iPad without MDM enrolment.
I suspect they want enrolment to restrict usage during class, so they will likely be a bit non-compliant at suggesting to go rogue though.

I'm surprised their iPad scheme is to buy though, i would have thought it would be rental with fee (cost of device) to replace if students lose them.
 
So my son took his ipad into school on Friday, when he returned it had been wiped, he was able to log in and a number of school apps installed themselves. So far, all the apps that he uses have installed and work fine so my concerns that this would end up being brick at home seem unfounded.
 
So my son took his ipad into school on Friday, when he returned it had been wiped, he was able to log in and a number of school apps installed themselves. So far, all the apps that he uses have installed and work fine so my concerns that this would end up being brick at home seem unfounded.
It’s not that. It’s more it can be monitored etc and things may come back to bite you.
 
Back
Top Bottom