Chapter 5 Internet services 46
To get the most out of these services, users should have their own Apple ID. If they don’t have
one, they can create one even before they receive an Apple device or use Setup Assistant. Using
Setup Assistant gives the user an easy and streamlined way to create an Apple ID right from their
Apple device. Apple IDs can also be created without the need for a credit card.
For one-to-one and student-owned deployments (or BYOD deployments), each user should have
their own Apple ID. In a shared-use deployment, an institution-owned Apple ID can be used to
deploy content on multiple Apple devices.
With an Apple ID, each student or employee can install apps, books, and other content provided
by the institution; take notes in iBooks that can be accessed between iOS devices and Mac
computers; and enroll in iTunes U courses—all without the need for IT to manage the Apple ID
on the user’s Apple device.
For more information about Apple IDs, see the My Apple ID website.
Find My iPhone and Activation Lock
If an iOS device is lost or stolen, it’s important to deactivate and erase it. With Find My iPhone,
part of the iCloud suite, users can see the last reported location of their iPad, iPhone, or iPod
touch by using Find My iPhone on iCloud.com or the Find My iPhone app on an iOS device.
Once the iOS device is located, the user can play a sound on it, put it in Lost Mode, or erase it
completely if it’s connected to the Internet.
Lost Mode (iOS 6 or later) will lock the iOS device with a passcode, display a custom message on
the screen, and keep track of its location. For iOS devices with iOS 5, this feature will only lock
the device.
With iOS 7 or later, when Find My iPhone is turned on, the iOS device can’t be reactivated
without entering the owner’s Apple ID credentials. You should supervise your organization’s
devices and have a policy in place for users to disable the feature so that Find My iPhone doesn’t
prevent your organization from assigning the device to another individual.
With iOS 7.1 or later, you can use a compatible MDM solution to enable Activation Lock on
supervised devices when a user turns on Find My iPhone. MDM administrators can manage
Find My iPhone Activation Lock by supervising devices with Apple Congurator or the Device
Enrollment Program. Your MDM solution can then store a bypass code when Activation Lock is
enabled, and later use this code to clear Activation Lock automatically when you need to erase
the device and assign it to a new user. See your MDM solution documentation for details.
Important: By default, supervised devices never have Activation Lock enabled, even if the user
turns on Find My iPhone. However, an MDM server may retrieve a Bypass Code and permit
Activation Lock on the device. If Find My iPhone is turned on when the MDM server enables
activation lock, activation lock is enabled at that point. If Find My iPhone is turned o when the
MDM server enables activation lock, it’s enabled the next time the user activates Find My iPhone.
For more information about Find My iPhone, Lost Mode, and Activation Lock, see the Apple
Support articles iCloud Support, iCloud: Use Lost Mode, and Mobile Device Management
and Find My iPhone Activation Lock. Also see Activation Lock settings in Prole Manager Help.
100% resize factor
