SCCM Help please :-)

glenimp617

glenimp617

glenimp617

Soldato
Joined
30 Sep 2005
Posts
16,735
Hi everyone,

I have an SCCM 2012 R2 Installation linked into Intune. I've been able to apply a configuration to my test ipad by removing access to the AppStore. Unfortunately I am having problems with the following:

1. I've deployed an AppStore app to my test device (Lync 2013 client), but when I login to the portal and click on my Company Apps it says 'No Applications Available". This is after leaving it for 24hrs now. The deployment has been set to available and required, both don't seem to show up on the device? anything I can check please

2. How do I remove access to iTunes? (users love wasting time looking at what films and music they want to buy)

3. How do I prevent users from performing an iOS update. This one is very important to us as we have apps that have broken in the past when users have done an iOS update

The licence model we are going with is per device rather than per user. We have thousands of users and only a few hundred ipads. This means we can to control settings per device not per user. The deployment and settings are assigned to a device collection, not a user group

Thanks for anyone who can help me out with this!!
 
Some of the more advanced IOS restrictions and changes can only be applied if the device has been provisioned in supervision mode first.

This is the case for most MDM products I've come across so I assume the same applies to InTune as the controls that can be applied usually lay with the platform and not the MDM product (API's etc).

Oh and Company Apps - isn't that for sidelining your own inhouse applications on to a Windows Phone device? - thought we couldn't use it to distribute marketplace etc apps? please let me know if you can as I need to deploy lync client to a load of Windows Phone devices too! :)
 
Last edited:
zoomee said:
Some of the more advanced IOS restrictions and changes can only be applied if the device has been provisioned in supervision mode first.

This is the case for most MDM products I've come across so I assume the same applies to InTune as the controls that can be applied usually lay with the platform and not the MDM product (API's etc).

Oh and Company Apps - isn't that for sidelining your own inhouse applications on to a Windows Phone device? - thought we couldn't use it to distribute marketplace etc apps? please let me know if you can as I need to deploy lync client to a load of Windows Phone devices too! :)
Click to expand...

Thanks, how do I do the supervision mode? are you sure that is actually correct though. There are no options within config mgr for this like blocking itunes / ios updates etc etc?

oh, I'll see if I can find the link which guides you through deploying an appstore app. No idea if it's new in r2, but you do have the ability to browse the appstore within config mgr
 
Last edited:
Supervision mode needs a mac mate - I have a Mac Mini here for this sole purpose!. Use the Apple Configurator software to connect to the apple device and provision it as a supervised device. You can then apply additional controls.

Hit me with some trust and I'll give you some more info if you wants dude. I'm not sure if Microsofts MDM solution offers the removal of the app store but I know both Airwatch and SOTI do, so I'd be surprised if MS's solution didn't.
 
Thanks mate

I've removed the App Store as SCCM had an option for that. It's the iTunes app and more importantly the iOS updates I want to block

We had loads of users immediately update to iOS 7 when that launched which killed some of their day to day apps.....obviously it was all ITs fault. The same thing will happen when iOS 8 is released, users don't learn!
 
no worries - I'm sure theres some IOS OS options when supervising a device. I'll check when I get back in the office monday or alternatively if you've got a mac (looks like u do in ur sig!) then install apple configurator software and check out the options available for preparing/supervising.

https://www.apple.com/au/iphone/business/docs/iOS_6_Configurator_Sep12.pdf

If you want to get all authoritarian you can definately use supervised mode to disable all functionality except just the apps you allow. You can create a sort of 'standard image' and deploy that to up to 30 devices from one imac at a time.
 
Don't think I've ever come across a single MDM solution, including their own, which Apple allows you to stop updating iOS, because lets be honest, they want everyone to download it on the day of release and praise them so much for how wonderful it is!

Like Zoomee, I use use a Macbook with Apple Configurator with all supervised devices, hooked up to a large iPad/iPhone/iPod Touch dock that can house 50 devices at a time.
 
You must log in or register to reply here.
Back
Top Bottom