Chapter 7 Conguration and management 61
•
Mail
•
Subscribed Calendars
•
VPN
•
802.1X
Managed mail and calendar accounts respect the Managed Open In restrictions in iOS 7 or later.
Queries
An MDM server has the ability to query Apple devices for a variety of information. This includes
hardware information, such as serial number, device UDID, Wi-Fi MAC address, or FileVault
encryption status (for OS X). It also includes software information, such as the device version,
restrictions, and a detailed list of all apps installed on the device. This information can be used
to help ensure that users maintain the appropriate set of apps. iOs and OS X allow queries about
the last time a device was backed up to iCloud, and the app assignment account hash of the
logged-in user.
With Apple TV software 5.4 or later, MDM can query enrolled Apple TV devices for asset
information such as language, locale, and organization.
Management tasks
When an iOS device is managed, it can be administered by the MDM server through a set of
specic tasks. Management tasks include:
•
Changing conguration settings: A command can be sent to install a new or updated
conguration prole on an Apple device. Conguration changes happen silently without
user interaction.
•
Locking an iOS device: If an iOS device needs to be locked immediately, a command can be
sent to lock it with the current passcode.
•
Remotely wiping an iOS device: If an iOS device is lost or stolen, a command can be sent to
erase all of the data on it. Once a remote-wipe command is received, it can’t be undone.
•
Clearing a passcode lock: Clearing a passcode sets the iOS device so that it immediately
requires the user to enter a new passcode. This is used when a user has forgotten their
passcode and wants IT to reset it for them.
•
Clearing restrictions password: Support for clearing the restrictions and restrictions password
set on the iOS device by the user. This feature is available for supervised devices only.
•
Request AirPlay Mirroring: Adds a command to prompt a supervised iOS device to begin
AirPlay mirroring to a specic destination.
•
Stop AirPlay Mirroring: Adds a command to prompt a supervised iOS device to stop AirPlay
mirroring to a specic destination.
Certain tasks can be queued in iOS 8 or later and in OS X Mavericks or later, if the device is in
Setup Assistant. Those tasks are:
•
Invitation into the Volume Purchase Program (VPP)
•
Install apps
•
Install media
•
Lock a device
•
Request AirPlay mirroring (iOS only)
100% resize factor
