Information about Automated Device Enrollment into MDM
Automated Device Enrollment lets organizations configure and manage Apple devices from the moment the devices are removed from the box (known as zero-touch deployment). These devices become supervised, and the MDM profile can’t be removed by the user. Automated Device Enrollment is designed for devices owned by the organization.
During the setup of a device, an organization can configure the device to be supervised. Supervision denotes that the device is owned by the organization, which provides additional control over its configuration and restrictions. With Apple School Manager or Apple Business Manager, supervision can be wirelessly enabled on the device as part of the MDM solution enrollment process for iOS, iPadOS, macOS, and tvOS devices, or enabled manually using Apple Configurator 2 for iOS, iPadOS, and tvOS devices. In iOS, iPadOS, and tvOS, supervising a device requires the device to be erased.
Mac computers enrolled in an assigned MDM solution that appear in Apple School Manager or Apple Business Manager can have their supervision reset by using the
profiles command-line tool:
profiles renew -type enrollment.
The following devices can be supervised:
iPhone, iPad, and iPod touch with iOS 5 or later
Apple TV with tvOS 10.2 or later
The following devices are supervised automatically when enrolled in Apple School Manager or Apple Business Manager:
iPhone and iPod touch with iOS 13 or later
iPad with iPadOS 13.1 or later
Apple TV with tvOS 13 or later
Mac computers with macOS 10.15 or later