Home
Join

Managing Apple iPhones

Posted by RDB001
Needs answer
Apple Best Practices

We are a municipality with around 25 iPhones.  The IT environment is a bit of a wreck which we are slowly trying to get back in control of.  Managing Apple ID's is an absolute pain and of course if you forget it, you are really hosed even if we are the owners of the account.  

Currently, users use their city provided email address as an Apple ID and they set their own passwords.  The problem is that when people resign or leave, then we are stuck without an Apple ID.  In the past for schools especially, we would just create a generic email account and then tie all devices to that one login.  Surely there is a better way such as a MDM or something that would give us a bit more control.  Working on a strict budget, but any ideas on how to handle this scenario are much appreciated. 

Spice (9) Reply (8)
RDB001

Popular Topics in Apple

Apple ABM and In-App Purchase Macbook Pro booting into safe mode Intune and VPP constant request to assign apps to account Apple Mail app not playing nice with Office 365 today How to create a private container on corporate iPhones? View all topics

8 Replies

  • You want to look into Managed Apple ID's using Apple Business manger. This will allow you to integrate with your current user login's and use the email address for your business. When doing this it will force users who have already setup accounts using their business email to link that account with a private account and the business email account stays in the business. Here is a link to refer to. https://support.apple.com/en-us/HT210737

    Spice (3) flagReport
    2 found this helpful thumb_up thumb_down

  • I'm lost you do get the phones back right?  If you have the phone, and you have the email address, you SHOULD be able to get the account reset. Biggest issue is the PIN unlock code. We force employees to reset the code to nothing or something simple before they leave.

    MDM is possible with M365 through Intune, but its a pretty heavy hand for just 25 phones. 

    Spice (2) flagReport
    Was this post helpful? thumb_up thumb_down

  • Look at Mosyle for a very affordable, full featured MDM.

    Spice (1) flagReport
    Was this post helpful? thumb_up thumb_down

  • We use Apple DEP and Airwatch on top.  It's not cheap though.

    As long as they use their corporate email address, you should be fine to remove the Apple ID after they leave.

    Was this post helpful? thumb_up thumb_down

  • If you use some form of MDM - and that can be the 'apple configurator' which is software ran on a mac to configure phones OR a full hosted MDM, then you can use VPP.

    VPP is volume purchase plan - part of apple deployment/apple business. IT allows central purchase of apps via the VPP account. That's all it does.

    SO it depends what you are actually requiring around appledIDs. if it is just recovering phones when someone logged in with an appledID you do not have the password for - then MDM is required for that to store the unlock keys etc.

    I would recommend using a cheap/free MDM.

    Was this post helpful? thumb_up thumb_down

  • ManageEngine will provide free MDM for up to 25 devices 

    https://www.manageengine.com/mobile-device-management/?pos=EndpointCentral&loc=ProdMenu&cat=...

    Spice (1) flagReport
    1 found this helpful thumb_up thumb_down

  • I think Mosyle is free for up to 30 devices as well actually.

    Was this post helpful? thumb_up thumb_down

  • Like manageengine also. 

    Was this post helpful? thumb_up thumb_down

or sign up to reply to this topic.

Didn't find what you were looking for? Search the forums for similar questions or check out the Apple forum.

Read these next...