Critical iOS 12 Updates
MatthewShaver 270006C69M Visits (1058)
As I have mentioned in a lengthy previous post, there are inbound changes to the way that non-DEP iOS devices enroll manually in to MDM (and to profile installations in general). Rather than update that, yet again, we'll look at the big picture here. First, here is a look at the new enrollment workflows on a device running iOS 12.2. beta:
As you can see, very similar to the workflows in the previous beta versions where this was available. Here are the critical updates that we now have:
Apple intends for these changes to go live with the 12.2 iOS release. Originally, in previous beta versions, the profile would stay on the device for 24 hours, after which, if the user has not installed it, it would auto-delete. That timer has been lowered from 24 hours to 8 minutes.
This implementation is the same regardless of the supervised status of the device. This workflow does not impact DEP/Business Manager/School Manager enrolled devices, however Apple has also noted that later this year (not in 12.2) all devices enrolled via ABM/ASM will be supervised no matter what is stated in the DEP profile via the MDM service.
The final note is that it looks like later this year (again, not in 12.2) Apple will finally be deprecating many of the stricter settings from non-supervised MDM settings. This means that items like restricting the installation of apps and restricting Safari will no longer impact devices. If your organization still has non-supervised devices deployed that take advantage of these features, now is the time to prepare them to be redeployed as Supervised and leveraging that specific feature set to maintain functionality.