Managing iOS Devices in Enterprise - Ownership of Devices (Part 3)

Ownership of Devices 

So, what are the basic requirements in enterprise we need to consider? Let's start by looking at two ownership types of devices with different management requirements. 

Mobile devices in enterprise scene can be grouped as follows. 

• User Owned (often referred to as BYOD or "Bring Your Own Device") 
• Supervised (or Organization Owned) 

BYOD 

BYOD is a notable trend where employees can use their own private devices at work. Some organizations have been slow in responding to users wishing to use their personal devices at work. The obstacles to such adaptation include security, the need for careful separation and securing of corporate apps, communication and resources running on private employee devices. To use enterprise solutions, users have to enroll their devices into corporate mobile device management solution (MDM) which shall respect the privacy of user's own resources.  

Supervised Devices 

Organization owned devices are often called "Supervised". This implies higher level of control over the device by the administrators than in BYOD scenario. Enhanced control could include, but not limited to disallowing iMessage, Game Center, iBooks Store, podcasts, AirDrop, preventing removal of apps, ability or erasing contents and settings and other functionalities which maybe common in private use scenarios, but necessary to prevent in the corporate world if devices are organization owned. 

To further distinguish the variety of requirements, supervised devices can be classified as personally enabled or non-personalized. In the first case, user generally has more flexibility in setting up device and installing apps. Non-personalized type would imply that the same device is used by multiple users and more control is on the side of administrator. Additional controls could include preventing install of new apps by users etc. 

Note that by default iOS devices will not be supervised. To start supervision you will need to choose from tools and services described later: Apple Configurator 2, MDM combined with DEP.