Consider best practices for different deployment scenarios
The process for deploying devices in an organization depends primarily on whether that organization or the user owns the devices and on how the devices are enrolled in a mobile device management (MDM) solution.
After understanding the basic steps for a device deployment, an organization’s IT team can explore Apple’s deployment and management capabilities in detail. If you’re a key stakeholder in your organization, you’ll want to review the deployment scenarios detailed below.
Watch the video Prepare Devices for Learners for an overview of essential tasks and resources needed to set up and manage Apple devices. Topics include selecting a deployment model, enrolling devices in mobile device management, and deploying core apps to students.
Plan for teaching and learning from home
With many students learning from home, there’s an opportunity to rethink the types of connectivity and access to learning tools you’re providing to the entire student population. On-campus Wi-Fi and inline content filtering work well when all students are physically at school. But in a situation where that isn’t possible, distributing devices for remote learning can help ensure that parts of the student population aren’t excluded from learning—for example, students without access to a device or without broadband internet at home.
A cellular-enabled iPad combines—into one easy-to-manage package—powerful tools and apps for creative learning experiences with built-in gigabit-class LTE and Personal Hotspot functionality. For remote learning deployment, follow these best practices:
Use embedded SIMs (eSIM) for scalability and tamper resistance.
Have a data plan that does not impose data usage limits or throttling.
Make sure there is carrier coverage and capacity in the areas your students live or learn from.
Deploy a content filtering solution that minimizes latency and respects user privacy, like the Cisco Security Connector on the App Store. For more information, see Take advantage of content filtering.
For more information, see Deploy iPad with cellular connections.
Purchase and provide the devices
In this deployment, known as the organization-owned model, your organization purchases devices from Apple or a participating Apple Authorized Reseller or carrier. You can then deploy devices in two ways:
One-to-one deployment: Provide a device to each user.
Shared-use deployment: Rotate a device among users.
For more information about the two MDM enrollment processes for the organization-owned model, see Device enrollment configuration options.
In a typical one-to-one deployment, your organization purchases devices for all eligible managers, staff, teachers, and students. You might purchase for a particular grade level, a department, an entire school district, or a university. Successful one-to-one deployments work best when they have:
Users configuring their own devices
Managed Apple IDs
A single app or a small set of core apps initially deployed automatically to devices
A self-service app deployment model for additional apps
Settings and restrictions that help focus students and prevent misconfiguration. For example, marking critical apps as nonremovable.
Simple self-help support resources for users.
In a shared-use deployment, devices are shared between students, sometimes during a class and sometimes from class to class. Shared iPad enables schools to share devices between students, while keeping student data separated and still providing a personalized experience. Students can access their personal content such as homework, apps, and assignments using a password or easy-to-remember four-digit PIN.
Shared iPad deployments work best when they have:
Users returned to the same device as much as possible to provide a fast sign-in experience. Using the Classroom app, teachers can easily assign devices to students, so students can return to their last-used device. For more information, see Intro to Classroom in the Classroom User Guide for iPad.
Storage allocation planned to balance sign-in speed and available work space. For more information, see user space considerations in Shared iPad.
All apps deployed to all devices.
The “Show app” restriction used on a per-user group basis to tailor the learning environment.
Note: Shared iPad requires Managed Apple IDs.
Use a mix of deployments
Your organization may use a mix of deployments. Examples are:
A middle school might deploy a one-to-one deployment for all grade levels.
A large district might first deploy a one-to-one deployment at a single high school and then roll out one-to-one deployments for the entire district.
A K–8 school might deploy a one-to-one deployment for fifth through eighth grades, and a shared-use deployment for kindergarten through fourth grades.
In higher education, a department might deploy a one-to-one deployment.
Have users purchase and set up their devices
In this user-owned model, users purchase, set up, and configure devices. These types of deployments are commonly referred to as BYOD, or bring your own device deployments. To use organizational services (such as Wi-Fi, mail, and calendars) or to configure the device for specific education or business requirements, users typically enroll their devices in an organization’s MDM solution. With the user-owned model, you can configure devices through User Enrollment.
User Enrollment is integrated with Managed Apple IDs to establish a user identity on the device. A Managed Apple ID is part of the User Enrollment profile, and the user must successfully authenticate for enrollment to be completed. The Managed Apple ID can be used alongside the personal Apple ID that the user has already signed in with, and the two don’t interact with each other.