Apple DEP Configuration Guide

The Apple Device Enrollment Program (DEP) provides a fast, streamlined way to deploy your corporate-owned Apple devices. DEP devices can be purchased directly from Apple or through Apple Authorized Resellers.

Why use Apple Device Enrollment Program (DEP) devices?

The following list explains the benefits of using Apple Device Enrollment Program (DEP) devices:

  • Apple DEP devices are enrolled in MDM and receive configuration settings immediately as soon as the device is turned on. This setup reduces the need for staging a device in a non-production environment before the device is ready for users. However, if a DEP profile is not assigned to a device or the device cannot connect to a network, the device is not automatically enrolled in MDM when the device is turned on.
  • The user of an Apple DEP device cannot manually remove MDM control, which is possible on devices that are not enrolled in the Apple DEP. For devices that are converted to DEP using the non-DEP to DEP feature of the Apple Configurator, users can remove MDM control during the first 30 days.
  • Administrators can define setup screens that allow Apple DEP device users to easily enroll in the Apple DEP.
  • iOS 11+ devices that are added to Apple DEP from the Apple Configurator are known as Supervised devices. You can also mark the following iOS versions as Supervised to take advantage of advanced management capabilities on the device:
    • iOS 11+ devices that are added to the Apple DEP from Apple or from Business Partners.
    • iOS devices that use iOS 10 or earlier.

Supervised devices are devices where MDM has better control over the device. Use any of the following methods to make a device supervised:

  • Apple Configurator: Prepare the device to install the supervised profile.
  • Apple Configurator: Use the Apple Configurator to convert a non-DEP device (iOS 11 onwards) to DEP.
  • DEP: Select the supervised option after you create a supervised profile and push that profile to a device.

Supervised devices versus Managed devices

A device is considered Supervised if the device is enrolled through the Apple DEP or is marked as Supervised in the Apple Configurator. Devices that are not marked as Supervised are considered Managed devices.

MaaS360® supports the following features for Supervised devices:

  • Single app mode, where only one app runs on the device.
  • Allow lists and block lists that control which apps are available on the device.
  • Marks a device that is lost and then tracks the device.
  • Silently installs apps without prompting the user.
  • Shared devices for Apple School Manager (ASM).
  • Web content filtering in the Safari browser.
  • Other device restrictions.

More information about the Apple DEP