How do I create a base image for iPADs, for management and distribution?

I need to set up imaging to create a  locked down iPAD profile. That can be distributed / downloaded to standardise these devices.

While I have been provided with a solution using apple image software...…and have a config file.
This will not or is not available to run on the MAC I have (High Sierra), next generation is required, which is unfortunately out with the hardware architecture tolerance.

I will be at my desk tomorrow 09:00 GMT.
And would hope to attempt any implementation recommended.
Any assistance gratefully received.
gavin_dAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DevAdminSystem Engineer | .NET Developer | Microsoft MVP | Technical SpeakerCommented:
Apple's guidelines for the management of this type of business need include the use of Mobile Device Management (MDM) software

Read the document iOS Deployment Overview for Business (https://www.apple.com/business/resources/docs/iOS_Deployment_Overview_Business.pdf)
gavin_dAuthor Commented:
Apologies - it would seem that the full text of my original question was not inserted as it should have been.

I do understand the principle and will be using MDM on the devices..
Once I have a suitable base image to deploy.
And will down load and read your Overview doc. Thanks

Issue:
The base image has to be "locked down" with minimum user intervention / access.
This is why I wish to create a base image. This will then be distributed to the other 95 (iPADs), that I have to do.

To recap:
Image would have been  be created in Apple Config 2, however the MAC I was given is High Sierra and I believe is not suitable to upgrade.
If I had a suitable MAC to use -

I think I an looking to find apple software of a generation version which will run on High Sierra, and allow me to conclude this task.
serialbandCommented:
Apple Configurator does not have the ability to do what you want.  It has the ability to create base images, but not secure them.  You'll need a real MDM system such as Airwatch, Centrify, etc... to lock down user systems.
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

DevAdminSystem Engineer | .NET Developer | Microsoft MVP | Technical SpeakerCommented:
even as far as I know through Apple Configurator you can create templates not images
gavin_dAuthor Commented:
thank to all for all the feedback on this.
It is very much appreciated.

What I have managed to do so far.
I have fooled the Apple Configuration software to run on a version (it said it would not install on).
Go figure.

The configurator has allowed me to create a profile (In which I can restrict a lot of user interactions).
And also remove installed applications.

I can save this as a blueprint - which I believe can be pushed onto other similar devices - this has still to be tested.

This is as far as I have managed to get.

If I do get this to work (As work around), I will update progress.

Again thanks to all for the assist.
gavin_dAuthor Commented:
thank to all for all the feedback on this.
It is very much appreciated.

Outcome:

The configurator has allowed me to create a Blueprint profile (In which I managed to restrict a lot of user interactions).
For example:
Setting an access password to allow access to the device.
But with limited functionality -
Where user was not allowed to change password / access iTunes / Siri / download or update any applications that were not already allowed or added.
Removed all device applications (which came as standard).
Limited WiFi access to our internal network only.
Disabled Bluetooth etc.
Disallowed document creation and saving...and so on.

The flexibility in the Blueprint is that at anytime I can version it to suit other customers or requirements
As part of the Blueprint inTune (MDM) has been installed.
And when the particular licences have been purchased - the customer will log in and centralised security and management (I believe will then be conferred)

Again thanks to all for the advice and assistance.
It is very much appreciated.
gavin_dAuthor Commented:
My thanks to both who assisted.
I did try to add and split the credit on solution.....but do not seem to be able to find how to do this?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
iOS

From novice to tech pro — start learning today.