Education Deployment Overview

Education Deployment Overview
Education Deployment Overview
iOS 9.3
What’s New
Apple School Manager
Managed Apple IDs
Apple is making it easier for schools and institutions of all sizes to deploy iPad for both one-to-one and
shared device environments—so your school can get up and running quickly. With iOS 9.3 we’ve made
significant enhancements for schools and institutions that enable technology managers, IT administrators,
and teachers to more easily set up, configure, and manage iPad in the classroom and throughout a school district.
Shared iPad
Classroom App for iPad
Deployment Steps
iOS 9.3 provides a streamlined way to deploy and manage devices for schools and institutions of all sizes.
This planning guide covers the steps involved in deploying iPad and complements the iOS Deployment
Technical Reference. You’ll learn how to prepare your environment, set up and deploy iPad, and enable
teachers in their classrooms.
Set Up
Support and Resources
iOS 9.3 delivers the following key enhancements that are covered in this overview guide:
• Apple School Manager. A new web portal that unifies the admin experience and enables you to enroll
devices, create Managed Apple IDs, buy apps and books, and more.
• Managed Apple IDs. Allows you to create and manage accounts for everyone at your school, so your
students and staff are ready to go from day one.
• Shared iPad. An elegant solution that provides students with a personalized learning experience in
shared environments.
• Classroom app for iPad. A brand-new app that gives teachers an elegant and powerful tool to manage
technology in the classroom and guide students.
• New management features. Powerful new management features to customize the classroom experience
and protect your school’s devices.
Note: Not all programs are available in all countries or regions. Deployment topics are covered at an
overview level in this guide, and in greater detail in the online iOS Deployment Technical Reference:
Apple Deployment Programs—Education Deployment Overview | March 2016
Apple School Manager
Apple School Manager is a new web portal from Apple that enables you to configure mobile device
management (MDM) enrollment settings, create Managed Apple IDs, buy content, and set up iTunes U
courses. This new destination is accessible through the web and is designed for technology managers and IT administrators.
Sign up is simple. Once you’re enrolled in Apple School Manager, your school, district, or institution can
easily assign devices to an MDM solution; purchase apps and learning materials; and create accounts for
staff, teachers, and students. On your first login, a helpful Setup Assistant walks you through the steps you
need to manage your devices, such as creating new roles for your staff and helping you connect your
school’s MDM solution to supported student information systems (SIS).
If you’re already enrolled in the Device Enrollment Program (DEP) or the Volume Purchase Program (VPP),
all of your account information and data will be migrated to Apple School Manager, bringing together
everything needed to deploy iOS devices and Mac computers.
Managed Apple IDs
Apple School Manager is where you can create Managed Apple IDs for your entire school or district.
Managed Apple IDs are owned and controlled by your school or district and have been specially designed
to meet the needs of education institutions, including creating IDs in bulk, allowing for password resets,
limitations on purchasing and communications, and role-based administration. These new Managed Apple
IDs enable staff, teachers, and students to access Apple services while providing administrators and
managers with the controls they need to deploy Apple Services throughout the school or district. Like any
Apple ID, a Managed Apple ID is used to access Apple services, including storing documents in iCloud Drive,
enrolling in iTunes U courses, and more.
Student information system (SIS) integration
Apple School Manager allows you to securely integrate with your SIS. By connecting your district’s SIS to
Apple School Manager, a Managed Apple ID can be automatically created for everyone in your organization,
including school administrators, staff, teachers, and students. Once you’ve authenticated and connected your
system, specific information such as names and classes are synchronized into Apple School Manager. You
can then manage roles and set initial passwords. Apple School Manager will periodically update any
changes from your SIS. And to ensure that your school’s directory data is preserved, no data is written back to your SIS.
Apple School Manager also tracks changes to classes and teachers throughout the year, so if a student
joins two weeks into the year, a Managed Apple ID tied to their teacher will be waiting when they arrive at school.
You can also create accounts from a CSV file exported from a directory system, such as your LDAP server.
Apple Deployment Programs—Education Deployment Overview | March 2016
Shared iPad
iOS 9.3 on iPad introduces a new feature called Shared iPad. This is a totally new way to use iPad in shared
learning environments, enabling multiple students to use the same iPad. Students log in with their own
Managed Apple IDs. While they work, apps that support cloud storage sync their data in the background.
Students log out when they’re done and iPad is ready for the next student. Data is cached locally on iPad
and, if necessary, it continues to push to the cloud even after logout. Thanks to this intelligent caching,
students don’t have to wait for everything to download after login—it’s already there.
Shared iPad supports a simplified login experience for younger students that makes signing in with their
Managed Apple IDs as easy as typing a PIN code.
Using Shared iPad requires the iPad to be supervised. Configuring Shared iPad with an MDM solution is
highly recommended. Profile Manager also supports Shared iPad.
Classroom App for iPad
Classroom is a new app for iPad that allows educators to take full advantage of teaching with iPad in the
classroom. Classroom provides elegant methods for keeping students on task, as well as tools for teachers
to manage common classroom tasks. Classroom works seamlessly with Managed Apple IDs and your MDM
solution or Profile Manager, so setup is simple and works in both shared and one-to-one environments.
To get set up, you’ll create groups (called Classes) of devices and users with your MDM solution. Once in the hands of a teacher, Classroom uses Bluetooth and Wi-Fi to establish a connection between the teacher’s iPad and the student’s iPad. Commands and interactions are delivered over the school’s existing
Wi-Fi infrastructure.
Classroom helps educators use iPad in the classroom to keep things on track. Teachers can quickly launch
the entire class into a specific app or share and open a link to a website. When it’s time to take a quiz, the
teacher can open and lock an app while students take the quiz. Or teachers can use Classroom to present a student’s work via Apple TV. All with just a few taps.
Teachers can also reset passwords, see who’s connected, find out which apps students are using, and assign
students to a specific iPad for a class period. The Screen View feature in Classroom allows teachers to see
the screen of any iPad their students are using.
New Management Features
With iOS 9.3 technology, managers and IT admins have even more management features and capabilities
to work with that benefit both classroom workflow and the overall management of your school’s
deployments. These updates include enhanced MDM controls, device restrictions, and configuration
payloads. The following is a summary of these new features:
• Home screen layout. Manage how apps, folders, and web clips are arranged on the home screens of supervised devices.
• Lost Mode. A feature of Shared iPad that lets you see an “If lost, return to” message on the device. Can be viewed on the login window and the Lock screen.
• Notifications. Allows app badges, sounds, banners, and alerts to be managed on a per-app basis on
supervised devices.
• Safari domain additions. Lets you restrict the saving of website passwords to only those in an approved list.
• User-specific configurations. Specify Home screen layout, notifications, restrictions, and Safari AutoFill for each user with Shared iPad.
Apple Deployment Programs—Education Deployment Overview | March 2016
• New device restrictions
- Allow Apple Music
- Allow Apple Music Radio
- Allow changes to Notifications settings
- Show/hide specific apps on Home Screen
• New MDM commands
The following are new commands that can be issued by MDM solutions, such as Profile Manager:
- Set maximum cached user accounts with Shared iPad so you can control the number of accounts that are cached
- Delete user
- Log out user
- Enable Lost Mode
- Disable Lost Mode
• New MDM queries
The following are new queries that can be issued by MDM solutions, such as Profile Manager:
- User list
- Device location
- Device information
- Is Lost Mode enabled
- Maximum cached users
Deployments Steps
The deployment process has been simplified so that your school can get up and running more quickly and
more easily. There are four phases to consider when planning your deployment. Here’s an overview on how
to complete deployment for all your institution-owned devices.
1. Prepare. The first step in any deployment is to consider your existing environment. This includes your
team, wireless infrastructure, and basic systems.
2. Set up. Apple School Manager simplifies deployment and unifies the admin experience by providing one place to manage people, devices, and content.
3. Deploy. Here you’ll deploy apps, books, and device settings with MDM, and distribute devices to
students and classrooms.
4. Enable. The Classroom app plays an essential role in helping teachers manage their classroom workflows.
And admins can deploy additional apps, content, and device settings to students and classes throughout
the school year.
Apple Deployment Programs—Education Deployment Overview | March 2016
1. Prepare Your Environment
Planning for successful deployments begins with preparing the right team, network, and systems. The
following considerations will help you in assembling your team, planning your network infrastructure, and
working with your mobile device management (MDM) solution and your student information system (SIS).
Establishing an inclusive team
An integrated team is the core of a successful deployment. Consider expanding the roles of instructional
staff so that you can better enable technology use throughout your school. Establishing clear roles will
help you plan which team members engage with Apple School Manager, MDM, and SIS.
You might discover new opportunities and untapped resources by connecting with leadership,
implementors, and students. Deployment is an inclusive process, so encourage the sharing of new ideas
and best practices among all team members. And inspire your staff with ongoing learning experiences,
such as informal or professional learning.
Preparing your network
A great wireless network is an essential ingredient of any successful iPad rollout to support classroom
workflows and access education content. Consider the following items when building your network plan.
Coverage and Capacity
One goal of designing a network based on coverage is to make sure the Wi-Fi signal reaches all areas
where Wi-Fi will be used. How will your students access content and collaborate all around campus? When
thinking about coverage areas, be sure to consider all your spaces, including common spaces, the gym, and
cafeterias. With great Wi-Fi coverage, the walls of the classroom are expanded.
While Wi-Fi coverage is important, the fundamental capability your network needs is support for a
sufficient density of devices. You will have many devices and users connecting to the network, so make
sure you have plenty of access points to support the number of simultaneous users in your environment. A design model based on capacity might include one or more access points for each classroom to support
learning activities. The power output of each access point can be reduced to prevent the Wi-Fi signal of
one access point from crossing into multiple classrooms.
Always design for capacity and use enterprise-class Wi-Fi gear for the infrastructure. Consider deploying a
carefully planned and monitored test group of devices first, which can provide essential data for full-scale
deployments. Evaluate your current Internet and intranet links to determine if they provide the best
learning experience for students in your organization—today and in the future. Consult your Internet
service provider for more information about bandwidth requirements for your organization.
Content filtering
iOS supports multiple forms of content filtering, including restrictions (parental controls), global HTTP
proxy, and advanced content filtering so you can cover all your network requirements. Devices running iOS 9 or later support advanced content filtering plug-ins from content filtering vendors.
Caching Server
Caching content within your network reduces Internet bandwidth and speeds up software installations;
this capability is especially important when deploying apps and books, and using services such as iCloud
and iTunes U. Caching can also speed up the download and delivery of software updates from Apple.
OS X Server includes a caching service for iOS devices and Mac computers. Caching Server speeds the
download of software distributed by Apple through the Internet and can dramatically reduce Internet
bandwidth utilization. Strategically deploying Caching Server within your organization’s infrastructure is
essential to providing a great user experience.
If your organization’s network has multiple sites or schools, an optimal configuration would include at least
one Caching Server per site. A Mac mini makes an excellent Caching Server. To learn more about Mac mini,
see Mac mini.
Apple Deployment Programs—Education Deployment Overview | March 2016
Caching Server can serve hundreds of clients concurrently. You get the best performance from your
caching service by connecting it to your network using Gigabit Ethernet. And when your network has
more than one Caching Server, the servers automatically share cached software.
When users receive their devices, they will likely download apps and content. Make sure your OS X Caching
Servers are installed and configured for use within the deployment space. To ensure that apps and content
are served from Caching Server, use a client to download the required apps before the deployment event.
You can monitor caching performance in the Server app.
For more information, see About Caching service.
Preparing systems
Before you can deploy, you will want to prepare two primary systems—mobile device management (MDM)
and your student information system (SIS). MDM is an essential service that helps you configure and
deploy all your school’s devices. While SIS integration is optional, it provides a simplified way to create
Managed Apple IDs and integrates class rosters with Shared iPad and the Classroom app.
Preparing your mobile device management (MDM) solution
iOS and OS X have built-in MDM capabilities that can be used by third-party solutions to configure devices,
deploy apps and books, and remotely wipe or lock managed devices over the air. MDM can also put iPad
into certain device states during activation, such as supervision and Shared iPad. These features enable
institutions to wirelessly manage devices and content at scale in an education environment.
Select an MDM solution for your school
MDM solutions are provided by Apple and third-party providers, offering a variety of server platforms,
management consoles, education features, and pricing structures. Consider your unique institutional needs
and evaluate your options. The following tips will help with your decision.
• Local-hosted or cloud-hosted MDM? MDM can manage devices anywhere in the world, making it well
suited for cloud hosting. If your organization chooses a cloud-hosted service, it may simplify some of the
steps outlined below.
• Education-centric functionality. Some MDM solutions offer functionality that is specific to learning
scenarios. For example, some MDM solutions might provide a simplified user interface for technology
managers, teachers, support staff, and students.
• Vendor support. In case you need assistance, understand how to access support services and training
from your MDM vendor.
• Support for iOS 9.3. Make sure your vendor supports Apple School Manager and the education features
of iOS 9.3.
• Query and reporting services. MDM servers can query iOS devices for a standard set of values, including
hardware, software, and settings information. This data can be useful for asset management, compliance
monitoring, and automated notifications.
Apple Deployment Programs—Education Deployment Overview | March 2016
Configure your MDM solution
When installing your MDM solution, take into consideration the following tips for configuring it with your
network and Apple services. You might want to test each of these services while you prepare for deploying
devices on your school’s network.
• Connecting to Apple services. MDM servers must connect to the Apple Push Notification service to
manage devices. The MDM solution must also connect to Apple School Manager in order to enroll
devices, distribute apps and books, and pull roster data.
• Connecting to directory services. Most MDM solutions work with directory services to leverage your user
directories and groups. Integrating with your organization’s Active Directory, Open Directory, or LDAP
service allows the MDM server to prompt users for their directory credentials upon enrolling in MDM, and
to associate users with devices. Some MDM solutions also integrate with student information systems.
Configuring your MDM server requires assigning the server a static IP address, a fully qualified domain
name, and a TLS certificate to secure communications, as well as opening specific firewall ports to enable
access by clients. If your solution is externally managed or hosted in the cloud, your vendor may handle
many of these items on your behalf. For more on configuring MDM with your network see:
- Back up your MDM solution. Back up your MDM server regularly to ensure that it continuously
manages clients. Confirm that your backups can be validated and result in a functional MDM server
with the appropriate certificates, tokens, and client relationships. Cloud-hosted or externally managed
services can include automatic backup functionality. Contact your MDM vendor for more information
on backup.
2. Set Up Apple School Manager
As a single place to manage people, devices, and content, Apple School Manager makes it easy to get set up
for your deployment.
Getting started with Apple School Manager
Program requirements
Before you enroll in Apple School Manager, make sure you’re using a supported browser, have the
necessary information ready for setting up your account, and check whether your devices are eligible. See requirements.
Verify device eligibility
Devices must be purchased through specific channels to be eligible for device enrollment in Apple School
Manager. To verify that your device purchase methods are compatible, see Eligible devices. To ensure that devices are available in the portal after enrollment, use the Search capability within the portal:
Enroll in Apple School Manager
Once you’ve verified that you’ve met the program requirements, sign up for Apple School Manager.
• New accounts. Go to Apple School Manager, click “Enroll your institution now,” and enter the required
information. During the review process, you or your verification contact will be contacted by phone or
email and asked for additional information before your enrollment is approved.
• Existing accounts. If you’ve already enrolled your institution in the Volume Purchase Program (VPP) or
the Device Enrollment Program (DEP), you can use that same program agent account to enroll in Apple
School Manager. Go to Apple School Manager, sign in using the existing DEP or VPP program agent
account, and click Enroll next to Apple School Manager.
After you’ve enrolled your institution, log in to the website to assign devices to your MDM solution; buy
apps and learning materials; and create accounts for staff, instructors, and students.
Apple Deployment Programs—Education Deployment Overview | March 2016
Using Apple School Manager
In Apple School Manager you can use the Setup Assistant to first set up an admin account, then add
managers and integrate your student information system. Once you’ve completed the basic setup, you can
then use the sidebar in Apple School Manager to manage people, devices, and content. You can go back to
the Setup Assistant at any time through the user account menu in the upper right corner.
Adding managers
If you have other staff members in your institution who will add people, devices, and content, you can
invite them to join Apple School Manager. This feature also allows you to delegate responsibility for
managing apps or specific tasks; for example, in a large school district or college, you might have staff at
the department level who make decisions about apps to purchase in bulk for students.
Managed Apple IDs
Creating Managed Apple IDs
You can create Managed Apple IDs manually, by uploading CSV files, from your school’s directory service, or
by linking your student information system (SIS).
• Add individual users. Managed Apple IDs can be created individually in Apple School Manager by
clicking Add New Person at the bottom of the window. For details on adding accounts, see “Add an
• Upload CSV. User accounts and classes can be created in bulk by uploading CSV files to Apple School
Manager. To get started, click Upload CSV at the bottom of the window. For details on adding accounts
via CSV, see “Add accounts from a CSV file”:
• Integrate with your student information system (SIS). By connecting your SIS to Apple School Manager,
a Managed Apple ID can be automatically created for everyone in your school or district, including
school administrators, staff, teachers, and students. You can then manage roles and set initial passwords.
Apple School Manager will import only the necessary data from your SIS to create and maintain your
Managed Apple IDs and classes. It will also periodically update changes from your SIS. At no time is data
written back to your SIS. For details on SIS integration, see “Add accounts using a student information
system (SIS”):
Using Managed Apple IDs
Manage roles
Once a Managed Apple ID is created for a user, the administrator can then assign roles for the user. These
roles include Administrator, Managers, Teachers, Staff, and Students. These roles define what tasks users can
perform in Apple School Manager:
Manage classes
A class is a collection of instructor and student accounts. Classes have at least one instructor added when
the class is created. Once a class is created, it is used with your MDM solution to enable classes to appear in the Classroom app for iPad and Shared iPad, and to simplify the login experience for students using
Shared iPad.
Manage accounts
Administrators can complete a range of tasks within Apple School Manager to manage accounts. For
example, you can search for accounts, which is useful when you want to assign roles or reset passwords for a specific set of users.
In addition, you can manually add an account at any time, such as when a temporary instructor is added to
your school. You can also view and edit account information, such as the user’s name, ID number, grade
level, and more. Depending on your role, you can also reset a user’s Managed Apple ID password. Learn
more about managing accounts:
Apple Deployment Programs—Education Deployment Overview | March 2016
Create additional accounts for staff
You can delegate control right from Apple School Manager to the appropriate staff by creating additional
“managers.” This capability is essential to ensure that if your initial Administrator leaves the organization,
you will not lose access to Apple School Manager. To create additional roles, see Manage administrators.
Connect your MDM to Apple School Manager
Your MDM solution connects to Apple School Manager using tokens to enroll devices, distribute apps and
books, and pull roster data.
To download a token so MDM can configure device enrollment and access roster data, see Add MDM
servers. To download a token so MDM can assign apps and books, see Volume Store tokens.
Apple School Manager tokens expire annually. Make note of the renewal date of the token upon installation.
For more on tokens, see:
Assign devices to your MDM server in Apple School Manager
You can assign all your devices to MDM right from Apple School Manager. Device assignment can be done
automatically and enables your MDM server to configure activation settings on iPad, so the device enrolls
in the MDM server when it is activated.
3. Deploy Devices and Content
Now that all your iPad devices are configured with settings, apps, and books, it’s time to get devices into
the hands of students and teachers. It’s important to plan the logistics of handing out devices to students
and staff, and some general recommendations are listed in the following section. In a one-to-one
deployment, users will receive their own devices, while in shared deployments, devices will usually be
placed in classroom carts.
Understanding deployment scenarios
iOS 9.3 streamlines the tools for both one-to-one and shared devices. It’s easier than ever to get iPad into
the hands of students and teachers right out of the box, so everyone is ready to go from day one.
One-to-one deployment
Providing a device to each student is referred to as a one-to-one deployment. This type of deployment can
be for a particular grade level; a department; or an entire school district, college, or university. A one-to-one
deployment provides the greatest opportunity for iOS devices to positively impact the learning process. In
a typical deployment, your institution purchases devices for all eligible students and staff.
Shared deployment
Schools can also choose to rotate devices among students, which is referred to as a shared deployment. In
this case iOS devices are purchased for use in a classroom, a lab, a library, or any use case where students
share devices throughout the day. iOS 9.3 provides a whole new way to manage shared deployments with
Shared iPad.
Your institution might also deploy a mix of scenarios; here are some examples:
• A middle school might deploy a one-to-one model for all grade levels.
• A large district might first deploy a one-to-one model at a single high school, then roll out one-to-ones
for the entire district.
• A K–8 school might deploy a one-to-one for fifth through eighth grades, and a shared deployment for
kindergarten through fourth grades.
• In higher education, a department might deploy an institution-owned one-to-one model.
Apple Deployment Programs—Education Deployment Overview | March 2016
Managing devices
Once you have assigned your devices in Apple School Manager, use your MDM to configure enrollment settings.
The first time an iOS device is turned on, it activates with Apple. You can choose the deployment type and
device settings in your MDM console, so that when a user activates an iPad, it is ready to go. Devices will be
automatically enrolled in your MDM server over the air, so you can send settings and commands, as well as
retrieve information, wirelessly.
Supervised devices
An important activation setting option for both one-to-one and shared device deployments is to supervise
the device. It is recommended to supervise devices so you can take advantage of education management
features. Supervision provides a higher level of management for iOS devices that are owned by your
organization, allowing restrictions such as defining Home screen layout, or showing and hiding apps. See details on supervision.
General enrollment settings
For your one-to-one deployments, your MDM can control specific screens of the iOS Setup Assistant, which
streamlines the user experience by enabling mandatory MDM enrollment and over-the-air supervision. This
feature also streamlines the initial deployment and configuration of devices. For more on Setup Assistant
configuration, see
Note: MDM can also ensure that user authenticate before enrolling their devices into MDM, from within the
iOS Setup Assistant. This feature informs your school which user is using each device so that appropriate
settings and content can be deployed.
Enrollment settings for Shared iPad
Shared iPad is simply another MDM enrollment setting. To use Shared iPad, activate new or erased devices
when the Shared iPad setting is enabled in the MDM console. The device will skip all remaining Setup
Assistant screens and restart into Shared iPad after enrollment in MDM is complete. To support Shared iPad,
the device must be supervised. Students will need to log in with a Managed Apple ID.
To remove Shared iPad, the device must be erased and reactivated with the Shared iPad enrollment setting
disabled in MDM. See more information on Shared iPad.
Configuring device settings with MDM
You can configure a range of powerful device settings using MDM, and you can use supervised restrictions
designed for K–12 schools. iOS 9.3 adds the capability to show or hide certain apps on each user’s Home
screen and control access to Notifications settings and Apple Music. In addition, you can manage the
Home screen layout, control the ability of users to modify account settings, and enable Lost Mode.
Managing content
With apps from the App Store and books from the iBooks Store, iPad can transform into almost any tool
you can imagine—a calculator, a periodic table, a telescope, a movie studio, a musical instrument, and
more. Apple School Manager makes it easy to buy apps and books in bulk for all your students and
teachers. And with iOS 9.3, it’s easy to deploy your apps wirelessly to iPad.
Buy apps and books
The App Store and the iBooks Store feature thousands of apps and books for education. Apple School
Manager gives institutions a simple way to purchase apps and books in bulk. Many apps in the Volume
Store offer special pricing for purchases of 20 or more copies to eligible educational institutions. Special
pricing isn’t available for books.
Apple Deployment Programs—Education Deployment Overview | March 2016
Deploy apps and books with MDM and Apple School Manager
Apple School Manager and MDM work together so your organization can purchase apps and books in
volume and then assign them to devices or users wirelessly. With managed distribution (an option in the
Volume Store to manage content with MDM), you can also revoke and reassign apps to different devices
and users, so your organization retains full ownership and control of purchased apps. You can also
purchase books in volume and distribute them to users with MDM. Books remain the property of the
recipient and aren’t revocable or reassignable. See more on distributing apps and books.
With iOS 9 or later, MDM can assign and deploy apps to devices without requiring the user to have an
Apple ID.
Plan for app and book distribution
It’s easiest to send apps wirelessly with MDM when apps are assigned to devices before they are deployed.
And if the device is supervised, apps can be installed silently by MDM. To alleviate bandwidth saturation
during the initial mass deployment, consider distributing only the apps necessary for the first day of class,
and make additional apps available to devices for download over time.
Use Apple School Manager to purchase all apps and books that are required for the initial rollout, including
any apps or books required on the first day of classes. Note the size of the apps and confirm that your Wi-Fi
network can support distributing that amount of data to all devices. For guidance on deploying content
with your specific MDM, contact your vendor. For more information about reducing network utilization, see
Caching Server.
Enable your staff to purchase content
Volume pricing requires that 20 or more copies of the same app be purchased at the same time with a
single account. Creating too many accounts may limit your organization’s ability to purchase the minimum
quantity required for volume pricing. To create additional accounts, see Manage administrators.
Request fulfillment of Apple apps
New iOS devices come with free copies of Apple’s popular productivity and creativity apps, including
Pages, Numbers, Keynote, GarageBand, and iMovie. End users can claim these licenses upon using the
devices for the first time. To learn how to acquire these apps so your institution can manage the licenses,
see Request free iLife and iWork apps for iOS through the Volume Purchase Program.
VPP tokens
MDM servers communicate with the Volume Store to assign apps and books to users. A token is required
for the MDM solution to communicate with Apple’s Managed Distribution service. To download a token,
see Distribute content. Contact your MDM vendor for specific information about installing the token in
your MDM server. Tokens expire annually. Make note of your token’s renewal date upon installation. To
avoid interruption, remember to download an updated token and upload it to your organization’s MDM
server before your current token expires.
Important: Avoid installing the same VPP token on multiple MDM servers, as this results in servers that are
unaware of the assignments made by other servers.
Apple Deployment Programs—Education Deployment Overview | March 2016
Plan events for one-to-one deployments
Planning events to launch your deployment can ensure the smooth handout of devices, so students and
teachers are up and running before school begins. Many schools host events to distribute devices and get
users up and running quickly in one-to-one deployments. Events give your school the opportunity to
educate stakeholders and parents on the benefits of iPad in the classroom, review acceptable use policy,
and efficiently distribute devices.
Hand out and unbox devices
A deployment event provides the opportunity to hand out and unbox devices. For one-to-one deployments,
devices are handed out to students and teachers prior to powering on; each user enrolls in MDM as part of
Setup Assistant. For Shared iPad, devices are typically deployed on carts in classrooms and are ready to go
when students arrive to class.
4. Enable the Classroom
During the Enable phase, teachers can manage technology in their classrooms and guide students in new
ways. The Classroom app is the primary tool to guide and assist students by taking them into apps, books,
and websites. And technology managers can use a robust toolset to manage devices, people, and content.
Apple School Manager and an MDM solution are the central tools to complete remote management tasks
such as reassigning apps, querying devices, and resetting device passwords.
Deploying Classroom for iPad
Once each teacher’s iPad is under MDM management, you can set up the Classroom app. In addition to
configuring your devices, MDM also configures the Classroom app. You will create sets of “classes” in MDM
so teachers using the Classroom app have the proper students in each class. If your SIS is integrated with
Apple School Manager, class information is automatically passed to your MDM solution for use in configuring
classes in Classroom.
Download and distribute the Classroom app
Classroom is available for free on the App Store and can be assigned to devices or users with MDM.
Download Classroom from the Volume Store so your MDM can deploy it remotely.
Prepare iPad for teachers and students
Once classes are created in MDM, teacher device profiles should update automatically. While restrictions,
apps, and Home Screen layout will differ for student and teacher devices, the class groups in your MDM will
be the same. Your institution-owned devices should also be supervised, which will streamline Classroom
app distribution, so the devices can receive assigned apps. iPad must support Bluetooth 4.0 or later (iPad
third generation or later, iPad mini or later).
Note: The Classroom app requires a dedicated teacher iPad, which cannot be configured with Shared iPad.
Workflows with the Classroom app
With the Classroom app, teachers can guide and conduct how students use their iPad—including activities
such as sharing a web page, opening an app, or viewing students’ screens. Teachers can also create groups
within a class—tailoring guidance for a single student, a group of students, or the entire class. To keep
students focused, teachers can lock an app on students’ devices to help them keep on task. And teachers
can even lock all iPad devices in the class so students cannot access their iPad devices. In addition, teachers
can share a student’s iPad screen with the rest of the class using AirPlay and Apple TV. See more on
Apple Deployment Programs—Education Deployment Overview | March 2016
Setting up Shared iPad
Shared iPad simplifies workflows for teachers and students by providing a personal learning experience on
shared devices. Using the Classroom app, you can immediately assign students to their devices and return
devices to the login screen for the next class. Transitions between classes can be greatly simplified with
Shared iPad, maximizing teaching time.
Simply check the Shared iPad option and your devices will be enabled in Shared iPad when activated.
When classes are set in your MDM solution, Shared iPad is ready to be assigned to students by the
Classroom app, simplifying the login experience for students.
Additional Tools and Ongoing Management
With iOS 9.3, technology managers have a robust toolset to manage devices, people, and content. Apple
School Manager and an MDM solution are the central tools used to complete remote management tasks
such as reassigning apps, querying devices, and resetting device passwords. Some MDM solutions include
classroom tools that enable teachers to leverage additional capabilities in the classroom, such as the following:
An MDM server can perform powerful administrative commands on devices that are managed, including
changing settings automatically without user interaction, locking or wiping a device remotely, or clearing a
passcode lock so users can reset passwords. An MDM server can also enable Lost Mode to track a device’s
location if the device is lost or stolen.
• Enable Lost Mode: Puts the device in Lost Mode with information shown on the Lock screen. You can locate devices using your MDM solution while maintaining student privacy.
• Fetch device location: Allows the device to report its location if the device is in Lost Mode.
• Remote wipe: Erases the data on a lost or stolen device.
• Clear passcodes: Clears the device passcode on a one-to-one device when a user has forgotten it, so the user can enter a new one.
• Modify restrictions: Changes settings and policies for a student or a device.
• Install iOS update: Pushes a software update to the device. Requires the device to be in Apple School Manager.
Managing assessments
An iPad can provide an easy way to guide a test taker to a single assessment app, and to disable hardware
or software features that allow a test taker to circumvent the assessment and invalidate the results. iOS
devices that are supervised and enrolled in MDM can use Single App Mode (SAM) or Autonomous Single
App Mode (ASAM) to lock an iOS device to a single app. iOS includes a number of features—such as spell
checking, auto-correction, grammar checking, and dictionary lookup—that can be temporarily disabled by
MDM during an assessment. Your organization can configure your devices for these settings. Also, a
number of MDM vendors offer teacher tools that allow teachers to send these commands right from their
own iPad devices. Learn more about assessment with iPad:
Apple Deployment Programs—Education Deployment Overview | March 2016
AirPlay and Apple TV
Now the Classroom app makes it even easier to present with AirPlay from both student and teacher
devices. Using AirPlay, teachers and students can wirelessly stream content from an iPad to a projector or
an HDTV via Apple TV. MDM can prompt students to mirror their device on a specific Apple TV, so they can
present to the entire class without complex configurations. Teachers can lead a class brainstorm or walk
everyone through a presentation. And students can share projects and other work on the big screen. iOS
devices can stream content from an iOS device to Apple TV, even if the devices are on different networks.
Peer-to-peer AirPlay lets a user connect directly from a supported iOS device to Apple TV without first
connecting to your network. This capability eliminates the need to join the right network or disclose Wi-Fi
passwords, and it prevents reachability issues in complex network environments.
Deploying additional content
After devices are deployed and the initial set of apps and books is installed, your organization might want
to purchase additional apps and books as needed. For apps and books that are purchased after deployment,
use your MDM solution to assign them to users and install them on devices remotely. Some MDM solutions
include a self-service app catalog interface that allows users to initiate MDM app installation for apps and
books purchased by the institution.
An MDM server can query devices for a variety of information, including hardware information, such as
serial number, device UDID, or Wi-Fi MAC address; as well as software information, such as the iOS version
and a detailed list of all apps installed on the device. This information can be used to help ensure that users
maintain the appropriate set of apps.
Updating setting and policies
Once devices are deployed, you might want to change how devices are configured. Because MDM allows
for wireless management of devices, changing settings can be simple and straightforward. If your deployment
is large, consider the impact of configuration changes on large sets of users and plan changes accordingly.
Updating software with MDM
Once devices are running iOS 9, you can use MDM to remotely update future versions of iOS. This
capability helps you keep all your devices current and allows you to take advantage of new features and
enhancements. If the device has a passcode, MDM can prompt users to update; if devices do not have
passcodes set, MDM can silently update iOS.
Apple Deployment Programs—Education Deployment Overview | March 2016
Support and Resources
The following resources allow you to further explore these topics and opportunities.
Now that you’ve deployed devices, apps, and books, your students and teachers can experience learning
with iPad anywhere, anytime. Further inspire and empower your staff with Apple’s education collections on
the App Store, Apple’s creativity and productivity apps, iTunes U, iBooks, and the professional development
experiences offered through Apple Professional Learning. For assistance with project management, contact
your Apple Education Sales representative.
Online Resources
Explore the following resources to learn more about these topics:
• Education Deployment Guide
• Apple School Manager Help
• Classroom Help
• iOS Deployment Reference
• OS X Deployment Reference
• Education IT and Deployment website
Support options
Apple provides a variety of programs and support options for iOS users. Before deploying devices, find out
what’s available for your institution and plan for any additional support you’ll need.
AppleCare OS Support
AppleCare OS Support includes AppleCare Help Desk Support and incident support. It includes support for system components, network configuration, and administration; integration into heterogeneous
environments; professional software applications, web applications, and services; and technical issues
requiring the use of command-line tools for resolution.
AppleCare Help Desk Support
AppleCare Help Desk Support provides priority telephone access to Apple’s senior technical support staff. It
also includes a suite of tools to diagnose and troubleshoot Apple hardware, which can help your institution
manage resources more efficiently; it also improves response time and reduces training costs. AppleCare
Help Desk Support covers an unlimited number of support incidents for hardware and software diagnosis,
as well as troubleshooting and issue isolation for iOS devices.
AppleCare for iOS devices
Every iOS device comes with a one-year limited warranty and complimentary telephone technical support
for 90 days after the purchase date. This service coverage can be extended to two years from the original
purchase date with AppleCare+ for iPhone, AppleCare+ for iPad, or the AppleCare Protection Plan (APP) for
iPod touch. You can call Apple’s technical support experts as often as you like with questions. Apple also
provides convenient service options when devices need to be repaired. In addition, AppleCare+ for iPhone
and AppleCare+ for iPad offer up to two incidents of accidental damage coverage, each subject to a service fee.
iOS Direct Service Program
As a benefit of AppleCare+ and the AppleCare Protection Plan, the iOS Direct Service Program enables your
help desk to screen devices for issues without calling AppleCare or visiting an Apple Store. If necessary, your
institution can directly order a replacement iPhone, iPad, iPod touch, or in-box accessories. Learn more
about AppleCare programs:
Apple Deployment Programs—Education Deployment Overview | March 2016
With iOS 9.3, it’s easier than ever to put devices in the hands of your students. Apple School Manager,
Managed Apple IDs, Shared iPad, and the new Classroom app work together to deliver the best experience
for every class. These new updates help simplify and streamline deployment so your school or district can
get up and running quickly.
Learn more about integrating iOS into institutions:
For more detailed technical information about deploying iOS, explore the iOS Deployment Technical Reference at
© 2016 Apple Inc. All rights reserved. Apple, the Apple logo, AirPlay, Apple TV, GarageBand, iBooks, iMovie, iPad, iPhone, iPod touch, iTunes U, Keynote, Mac, Numbers, OS X,
Pages, Safari are trademarks of Apple Inc., registered in the U.S. and other countries. Apple Music and iPad mini are trademarks of Apple Inc. AppleCare, Apple Store, and
iCloud are service marks of Apple Inc., registered in the U.S. and other countries. App Store and iBooks Store are service marks of Apple Inc. The Bluetooth® word mark and
logos are registered trademarks owned by Bluetooth SIG, Inc. and any use of such marks by Apple is under license. IOS is a trademark or registered trademark of Cisco in
the U.S. and other countries and is used under license. Other product and company names mentioned herein may be trademarks of their respective companies. Product
specifications are subject to change without notice. This material is provided for information purposes only; Apple assumes no liability related to its use. March 2016.
Apple Deployment Programs—Education Deployment Overview | March 2016
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF