Mobile Manager

Settings

General

Sorry, you don’t have access to this content. Please log in or contact a site administrator for help.

Microsoft BSP

Administrators can use the Microsoft BSP page to enter BSP (Business Store Portal) information to allow app deployment for Windows 10 devices. Microsoft BSP

Enter your BSP Account name and Tenant, then click Add Account.

Apple DEP

Mobile Manager now supports Apple’s Device Enrollment Program (DEP) for iOS 7+ and OS X 10.9+ (Mavericks).

With DEP,

  • Wirelessly enroll and supervise devices without the use of Apple Configurator.
  • Prevent Students from removing profiles.
  • Simplify the enrollment process.

Follow the steps below to configure DEP. Please note devices purchased more than 3 years prior to the date of your DEP enrollment are not eligible.

Before you begin you must enroll in Apple’s Deployment program. Please visit https://www.apple.com/education/it/dep/. This website will provide:

  • Instructions to enroll devices into the Apple DEP program.
  • How to setup and configure devices over-the-air (OTA) with DEP.
  • And provide access to Apple’s Device Enrollment Program Guide.

Once your district is successfully enrolled in the Apple’s Deployment program, login into Mobile Manager and navigate to the district, school or group you want to enroll your devices.

Click Settings and then Apple DEP.

>mm-dep-apple

Download the certificate: On Apple go to your account, create a server, and give it a name.

>mm-dep-add-server

Upload the PEM file that was downloaded from Mobile Manager.

>mm-dep-add-public-keys

You will then be asked if you wish to download your server token now.

>mm-dep-download-service-token

You will receive a .p7m file.

Navigate back to the enrollment group in Mobile Manager, select Settings, and then Apple DEP.

Upload your credentials and give it a name.

>mm_dep_creds

You now have the ability to create a profile. Select Build Enrollment Profile and choose the appropriate settings.

>ADP

>mm_dep_settings

Field Definition
Profile Name If needed, enter or edit the profile name.
Allow Pairing Check (select) this option to allow device pairing. For example, enable this option to allow Bluetooth device pairing.
Supervise Devices Check (select) this option to put iOS devices in Supervised mode.
Mandatory Check (select) this option to make Mobile Manager profiles on devices mandatory.
Removable (by user) Check (select) this option to let users delete profiles on their devices.
User Support Phone Enter a phone number for the profile for users to call.
Department Enter a department name for the profile.
Skipped Setup Items Check (select) the setup options (Passcode, Location, Restore, AppleID, Terms and Conditions, Siri, and Diagnostics) to skip during the device setup process for users. Skipping unused options can both shorten and simplify the setup process.

Click Create Profile.

Last, click Deploy Profile. You can then select certain devices or all devices.

>mm-dep-assign-profile2

From the Assign Profile dropdown list select a profile and then click Assign Profile to associate this profile with selected devices or from the Assign Profile dropdown list select a profile and then click Mass Assign Profile to associate this profile with all devices.

>ADP3

Current devices will have to be restored to factory default and go through the setup assistant in order to take advantage of DEP. Newly-purchased devices that have not gone through the setup assistant will automatically be enrolled in the group in which you setup DEP.

Watch: Overview of Apple DEP

Managing Apple DEP Enrollment Profiles

You can also view enrollment profile details as shown below. Organization admins can also remove enrollment profiles and update their credentials.

>mmdep-bep2

Viewing Enrollment Profile Details

To view enrollment profiles click Profile List. The following will be displayed.

>ADP4

Enrollment

With Authentication Enrollment you can automatically pair both DEP and non-DEP iOS and OS X devices with their respective users.

Note:

iOS devices must be running 7.1 or higher to use this feature.

Follow the steps below to enable Authentication Enrollment.

  • 1. Navigate to the appropriate level.
  • 2. Click Settings.
  • 3. Click Enrollment.

Authentication Enrollment

  • 4. Check (select) Require Authentication.
  • 5. Optional. Enter an enrollment password.
  • 6. Click Save.

Apple Classroom

Mobile Manager now supports Apple Classroom. We have made it easier than any other MDM solution, with just a few steps to configure and no certificates to push. The following steps demonstrate how to enable and deploy Apple Classroom.

Prerequisites

  • -iOS 9.3 is required for Apple Classroom to work.
  • -Apple Classroom only works on
    • -iPad (3rd generation) or later
    • -iPad Air or later
    • -iPad mini (1st generation) or later
    • -iPad Pro
    • Note: As long as your devices and school support Shared iPads, so will Mobile Manager! Learn more about Apple’s guidelines for Shared iPads here.
  • -Student devices must be supervised. Staff devices do not have to be supervised.
  • -Devices must be assigned to users (Teachers and Students) that are members of the group in Mobile Manager.
  • -Classroom leaders must be group admins in Mobile Manager.
  • -Bluetooth must be enabled on Student and Teacher devices.
  • -Student and Teacher must be on the same network/VLAN with client-to-client communication enabled. 
  • -Student devices must be in proximity of the teacher device for Apple Classroom to work (Apple Classroom utilized bluetooth technology.)
  • -The Allow Screen Capture restriction must be enabled for all devices in Mobile Manager in order to view a screen.7

You can browse Apple Classroom documentation here.

Deploying Apple Classroom

1. You will need to purchase the Apple Classroom licenses directly through Apple’s Volume Purchase Program.

2. You will then need to install Apple Classroom on your devices through Managed Distribution. Customers located in regions where VPP is not supported can install the app through the App Store.

Note: The app will not appear on the student devices however the configuration will be sent to the device.

Enabling Apple Classroom

1. Navigate to your Organization and click Settings -> Apple Classroom. Check the Enable and click Save. 

apple1

2. Important: Repeat Step 1 for each of your Groups that will be using Apple Classroom. Your teacher must be the Group Owner or an Admin of the Group.

You can verify that the devices have the proper configuration by checking under Settings > General > Profile and Device Management > Lightspeed MDM Profile > More Details, you will find an Education Configuration certificate. Your Teacher device will also have a Leader Identity certificate, and a VSTC CA v1.0 certificate. Your Student devices will have a Member Identity certificate.

123

Enabling Auto Association for Users

You can enable Auto Association by navigating to Settings > Apple Classroom and clicking Enable Auto Association. 

PPLE2

Enabling this setting will make MDM automatically associate an MDM user with a shared device when a student logs into a shared device. The MDM user that will be automatically associated with the device based on the managed Apple ID which was used to login to the device. For this reason, we strongly advise that you sync your data from Apple School Manager before enabling this setting. This will ensure that the MDM has the necessary managed Apple ID information for every user. Put simply, once this setting is enabled the person that logs into the shared device, will be the same user that is associated with the device in MDM, so that the correct apps, profiles, etc will be installed to the device depending on who logs in.

When enabled, while logging into a shared device, the MDM user that has the same managed Apple ID will be associated to the device, while the previously associated user is disassociated. Anytime this feature is turned on or off, the Classroom profile will resend. With this feature enabled, the first and last name of the MDM user will appear at the top left of the device and in Apple Classroom, rather than the Apple ID. If a user signs into a device and the managed Apple ID isn’t found, but a user with that email address is, MDM will set the user’s managed Apple ID to the email address and associate the user.

Re-Syncing Apple Classroom

You can re-sync Apple Classroom in each of your Groups. To re-sync Apple Classroom, navigate to a Group that uses Apple Classroom and click Settings -> Apple Classroom. Check the Re-Sync and click Save.  

aOOL2

Once all steps have been completed and receipt of the certificates confirmed, you will be able to use Apple Classroom with Mobile Manager. 

Network

Network Settings

Wallpaper Management

The Wallpaper Management setting allows you to manage wallpapers that have been uploaded.

Click the green Currently in use button to see information about the wallpaper that is currently in use.

A popup modal will provide details on the item being used, including which groups it is used in and whether an item is used by a profile that is located within a deleted group.

Certificate Management

The Certificate Management setting allows you to manage certificates that have been uploaded.

Click the green Currently in use button to see information about the wallpaper that is currently in use.

A popup modal will provide details on the item being used, including which groups it is used in and whether an item is used by a profile that is located within a deleted group.

URL Management

URL Management allows you to delete files that are not in use. Also, you are now able to download previously uploaded .txt files from URL Management.

icon

Click the green Currently in use button to see information about the wallpaper that is currently in use. A popup modal will provide details on the item being used, including which groups it is used in and whether an item is used by a profile that is located within a deleted group.

Icon Management

Icon Management allows you to delete icons that are no longer in use.

url

Click the green Currently in use button to see information about the wallpaper that is currently in use. A popup modal will provide details on the item being used, including which groups it is used in and whether an item is used by a profile that is located within a deleted group.

App Config Management

Note: These settings will only show at the District level.

The App Config Management page allows the administrator to remove unused App Configurations, if not in use, by clicking the Delete button. Administrators can view App Configurations by clicking the View button. Lastly, administrators can see where App Configurations are configured by clicking on the Currently in use button.

When clicking Currently in use, the following will pop up. You can click on any item under Group Name to directly navigate to that group.

If an app is deleted before the App Configuration is deleted, you will see a warning in red text on the App Configurations policy page informing you that the app is no longer inherited or installed in this group, so the app configuration will no longer be applied.

 

 

CSV Import

In Mobile Manager, admins can import CSV files to associate previously-enrolled devices with existing users and groups, add users to groups, bulk rename iOS8+ devices, and other tasks.

  • 1. Navigate to the organization (top) level.
  • 2. Click Settings.
  • 3. Click CSV Import. This action opens the following page:

CSV Import

  • 4. Find the import type in the list, then click Choose File.
  • Add a SIS ID to Users by Username: CSV has two columns–username and SIS ID

  • Connect Users to Devices by SIS ID and Serial Number: CSV has two columns–user’s SIS ID and the device serial number

  • Add Devices to Groups: CSV has two columns–device serial number and group SIS ID

  • Additional CSV import types allow you to mass update supervised iOS 8+ device names; mass update device asset tags; decommission devices by serial number

  • 5. Select the CSV file to upload and click Choose (Finder) or Open (Explorer)
  • 6. Click Import File.

 

Click below for more information on each import type.

Admin Tools

Admin Tools allow you to perform a variety of device maintenance functions from a single location. You can navigate to Admin Tools by clicking Settings and then Admin Tools. Each function selected will impact the current Group or Organization and all Groups below it.

Admin Tools give you the following functions:

  • Clear Activities
  • Re-Sync
  • Reinstall Apps
  • Force Management During App Install

To run any of these functions, simply check the box next to the function name and click Perform Maintenance. You can run as many of the functions concurrently as you wish. You can run these functions once every 15 minutes.

admin

Google

Enable Google Integration in Mobile Manager

  • 1. Log into Mobile Manager with the same email address you use to administer your Google domain.
  • 2. In Mobile Manager, navigate to the Organization (District) level, then click Settings in the left navigation area.

MMGoogIntegration

  • 3. On the Settings page, click Google.
  • 4. Click Enable to link your Google administrator account to Mobile Manager. 
  • 4. On the Permissions page, click Allow. 

MMGooglePermission

Sync your Google Users

If you would like to import your Google users and associate them automatically with devices, click Sync Users. 

Note: If you have already provisioned your users via CSV import or SIS sync, existing users will be associated with devices if the email addresses match.

Add your Google Domains to Mobile Manager

When your users log into their devices using the domain(s) that you manage with your Google account, their devices will be managed automatically in Mobile Manager.

  • 1. Log into Mobile Manager with the same email address you use to administer your Google domain.
  • 2. In Mobile Manager, navigate to the Organization (District) level, then click Settings in the left navigation area.
  • 3. On the Settings page, click Google.

 MMGoogIntegration

  • 4. Enter those domain names in the Google Domains field, and press [Enter] at the end of each domain name to add it to the list.

iOS Screen Layout

You can now have full control over your students’ supervised iOS 9.3+ device screens. With iOs Screen Layout, you can determine the layout of students’ docks and home screens. This includes the exact location of all app icons, folders, and pages.

Note: Layouts are created at the top organization level. Then at the school and group levels, admins can apply the appropriate layout (e.g., high school or kindergarten). See videos below for how to create and apply screen layouts.

Note: No apps are installed through layouts. Rather, they allow you to determine how specific apps should be ordered regardless of whether Mobile Manager installs them or users install them. On the device, apps that are not listed here will be displayed after those that are.

You can access iOS Screen Layout settings by logging into Mobile Manager and navigating to your organization and then Settings -> iOS Screen Layout

1

On the right-hand side dropdown menu, you will have the option to either use the Device Default layout or to create a New Layout. Click on New Layout if you wish to customize the layout.

2

The following page will appear. You will have several options on this page, including:

a. Name the new layout
b. Add a folder or app to the Dock section of the device
c. Add a folder or app to the Page 1 of the device
d. Cancel the new layout
e. Reset the layout configuration
f. Save the layout configuration
g. Add another page to the device

13

Let us dive deeper into adding folders and apps. If you click on add Folder in the Dock section, the folder will appear within the layout grid. You can edit the name of the folder by clicking on the pencil icon to the right of the folder name.

4

Clicking on add App will bring up a search page, prompting you to specify which app you want to add. You will need to input the app name in the search parameter, choose whether you want an iPad or iPhone app in the dropdown menu, and then simply click on the correct app from the list of results in order to add it to the layout. In our example below, we searched for iTunes and decided to add iTunes U to the layout.

5

You can now see the iTunes U app in our Dock layout next to the folder we created earlier.

6

Manipulating the layout within the Dock and each Page is easy. Want the app to appear before the folder? Simply left-click it and drag it to the left of the folder while holding down the left mouse button.

7

Want the app to appear inside the folder? Simply drag it into the gray box with the folder name that appears under the main layout.

8

You can create multiple folders within the Dock or each Page, or no folders at all. The organization is completely dynamic and up to you!

If you need additional pages, simply click on Add Page under your last Page. This will create a new box (Page 2 after Page one, for example) under the current Page.

14

 

15

To delete any Page, simply click the gray “x” to the right of the Add Folder | App option.

16

 

You can edit any layout you have created by selecting it from the dropdown list and clicking Edit.

17

Note: Deleting a page will permanently delete all of the layout configurations within that page.

The following is a sample setup we have created to illustrate the organizational power of the iOS Screen Layout function. We had three folders within the Dock section, each populated with three apps. This is only the beginning of the customization options that this function allows. The limit is your imagination!

12

The following video illusrtrates how to create a Screen Layout:

The following video illustrates how to apply a Screen Layout: