Automated Device Enrolment into mobile device management
Automated Device Enrolment lets organisations configure and manage Apple devices from the moment they are removed from the box (in a process known as Auto Advance deployment). These devices become supervised, and the MDM profile can’t be removed by the user. Automated Device Enrolment is designed for devices owned by the organisation.
Supervision
During the setup of a device, an organisation can configure the device to be supervised. Supervision denotes that the device is owned by the organisation, which provides additional control over its configuration and restrictions. With Apple School Manager or Apple Business Manager, supervision can be wirelessly enabled on the device as part of the MDM solution enrolment process for iPhone, iPad, Mac and Apple TV, or manually enabled using Apple Configurator 2 for iPhone, iPad and Apple TV. In iOS, iPadOS and tvOS, supervising a device requires the device to be erased.
Mac computers enrolled in an assigned MDM solution that appear in Apple School Manager or Apple Business Manager can have their supervision reset by using the profiles command-line tool: profiles renew-type enrolment.
The following devices can be supervised:
iPhone, iPad and iPod touch with iOS 5 or later
Apple TV with tvOS 10.2 or later
The following devices are supervised automatically when enrolled in Apple School Manager or Apple Business Manager:
iPhone and iPod touch with iOS 13 or later
iPad with iPadOS 13.1 or later
Apple TV with tvOS 13 or later
Mac computers with macOS 10.15 or later
Automated Device Enrolment payloads and restrictions
Automated Device Enrolment has a set of payloads and restrictions that can be applied to the device. See Automated Device Enrolment payloads and supervised restrictions for the complete lists.