How do I create a base image for iPADs, for management and distribution?

gavin_d
gavin_d used Ask the Experts™
on
I need to set up imaging to create a  locked down iPAD profile. That can be distributed / downloaded to standardise these devices.

While I have been provided with a solution using apple image software...…and have a config file.
This will not or is not available to run on the MAC I have (High Sierra), next generation is required, which is unfortunately out with the hardware architecture tolerance.

I will be at my desk tomorrow 09:00 GMT.
And would hope to attempt any implementation recommended.
Any assistance gratefully received.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
DevAdminSystem Engineer | .NET Developer | Microsoft MVP | Technical Speaker

Commented:
Apple's guidelines for the management of this type of business need include the use of Mobile Device Management (MDM) software

Read the document iOS Deployment Overview for Business (https://www.apple.com/business/resources/docs/iOS_Deployment_Overview_Business.pdf)

Author

Commented:
Apologies - it would seem that the full text of my original question was not inserted as it should have been.

I do understand the principle and will be using MDM on the devices..
Once I have a suitable base image to deploy.
And will down load and read your Overview doc. Thanks

Issue:
The base image has to be "locked down" with minimum user intervention / access.
This is why I wish to create a base image. This will then be distributed to the other 95 (iPADs), that I have to do.

To recap:
Image would have been  be created in Apple Config 2, however the MAC I was given is High Sierra and I believe is not suitable to upgrade.
If I had a suitable MAC to use -

I think I an looking to find apple software of a generation version which will run on High Sierra, and allow me to conclude this task.
Apple Configurator does not have the ability to do what you want.  It has the ability to create base images, but not secure them.  You'll need a real MDM system such as Airwatch, Centrify, etc... to lock down user systems.
Learn SQL Server Core 2016

This course will introduce you to SQL Server Core 2016, as well as teach you about SSMS, data tools, installation, server configuration, using Management Studio, and writing and executing queries.

DevAdminSystem Engineer | .NET Developer | Microsoft MVP | Technical Speaker

Commented:
even as far as I know through Apple Configurator you can create templates not images

Author

Commented:
thank to all for all the feedback on this.
It is very much appreciated.

What I have managed to do so far.
I have fooled the Apple Configuration software to run on a version (it said it would not install on).
Go figure.

The configurator has allowed me to create a profile (In which I can restrict a lot of user interactions).
And also remove installed applications.

I can save this as a blueprint - which I believe can be pushed onto other similar devices - this has still to be tested.

This is as far as I have managed to get.

If I do get this to work (As work around), I will update progress.

Again thanks to all for the assist.

Author

Commented:
thank to all for all the feedback on this.
It is very much appreciated.

Outcome:

The configurator has allowed me to create a Blueprint profile (In which I managed to restrict a lot of user interactions).
For example:
Setting an access password to allow access to the device.
But with limited functionality -
Where user was not allowed to change password / access iTunes / Siri / download or update any applications that were not already allowed or added.
Removed all device applications (which came as standard).
Limited WiFi access to our internal network only.
Disabled Bluetooth etc.
Disallowed document creation and saving...and so on.

The flexibility in the Blueprint is that at anytime I can version it to suit other customers or requirements
As part of the Blueprint inTune (MDM) has been installed.
And when the particular licences have been purchased - the customer will log in and centralised security and management (I believe will then be conferred)

Again thanks to all for the advice and assistance.
It is very much appreciated.
Commented:
My thanks to both who assisted.
I did try to add and split the credit on solution.....but do not seem to be able to find how to do this?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial