Kaseya MDM: Apple MDM profiles

NAVIGATION  (missing or bad snippet) > Configuration > (missing or bad snippet)

PERMISSIONS  Administrator

With MDM configuration profiles, you have the ability to automate the setup of mobile device user accounts, networking settings, security policies, and hardware, operating system, and application restrictions from the moment the device is enrolled. This powerful feature eliminates the need for administrators to manually onboard every MDM endpoint in your environment, saving you time and ensuring that all devices are configured consistently.

This article provides an overview of MDM configuration profiles and describes the process to create and deploy them.

NOTE  To learn how to enroll a device in MDM, refer to Kaseya MDM: Enrollment.

Overview

With MDM configuration profiles, you can create predefined setup templates for supported Apple devices and associate them with management policies. When Kaseya MDM detects a client that meets the criteria of one or more of the associated policy rules, it will automatically apply the corresponding profile to the device via the Apple Push Notification Service.

Supported hardware

Mobile devices (iPad and iPhone) support management via configuration profiles.

Capabilities

Configuration profiles support the following applications and system settings:

Category Description Applications and settings
Networking Manage network configuration, including WiFi, Ethernet, and VPNs. WiFi, Ethernet, cellular, firewall, DNS, proxy, VPN, AirPlay, AirPrint
Security Control sensitive security-related device settings. Authentication, certificates, parental controls, encryption, passcodes
Restrictions Manage hardware, operating system, and application restrictions. Bluetooth, camera, Game Center App Store, lock screen, user creation, startup, authentication
System Configuration Enable or disable interface elements, manage login behavior, control system updates. Login behavior, user experience, preferences, software catalog

How to...

To create an MDM configuration profile, perform the following steps:

  1. From the left navigation menu in your Kaseya MDM instance, navigate to Configuration > Profiles.
  2. At the top of the Folders list, click All Profiles.

  3. In the Profiles pane, click New Profile.
  4. In the Details section of the Create New Profile page, enter a name and a brief description for the profile.

  5. In the Policy Type section, make the following selections:
    • Policy Type: Device Configuration
    • Configuration Type: Any Apple MDM configuration type
  6. Click Next.
  7. Select a configuration section from the Not Configured Sections list. Then, click Add Configuration.
  8. You'll notice that the selected configuration moves into the Configured Sections list. Complete all applicable fields.
  9. To add additional configuration sections, click Add Configuration. To remove a section, click the Remove link next to its name.
  10. When you've finished customizing the profile, click Create.

Next, you'll need to create a policy that defines the devices to which you'd like to automatically apply your configuration as follows:

  1. Navigate to Administration > Configuration. Create a new policy or edit an existing policy.
  2. Click Assign Profile.
  3. Locate the profile you'd like to use. Select it by clicking the radio button next to its name.
  4. Click Assign.
  5. Kaseya MDM will begin enforcing the selected profile immediately. You can view it in effect at Configuration > Policies.