WEBVTT 00:07.170 --> 00:11.560 And this lesson we're going to talk about Apple school manager and Apple business manager now, I'm 00:11.580 --> 00:15.840 I'm logged in currently into my instance of Apple school manager. 00:16.140 --> 00:20.880 Apple business manager is going to have similar features, maybe slightly different interface, slightly 00:20.880 --> 00:21.570 different things. 00:21.570 --> 00:29.550 But basically what I want to show in relation to device enrollment program is how this whole thing works 00:29.550 --> 00:31.390 and how you can interact with your devices. 00:32.340 --> 00:37.140 So first, I'm just going to skip down to the bottom here on the left hand side. 00:37.140 --> 00:39.000 I'm going to look at settings. 00:39.450 --> 00:44.390 OK, so you'll have settings, you'll have apps and books as options here as well. 00:44.880 --> 00:46.180 And this is pretty cool. 00:46.200 --> 00:53.640 This is where you actually add store credit and are able to purchase apps and books that can then be 00:53.880 --> 00:59.580 managed and distributed to others in your organization or loaded onto your devices. 01:01.170 --> 01:05.540 Information about your particular organization and institution is listed here. 01:07.380 --> 01:14.730 Accounts are going to be listed here, you can create managed Apple IDs that are tied to your specific 01:14.730 --> 01:19.080 organization, they have a little bit of a different domain here. 01:19.230 --> 01:25.380 You can also if you use ETFs with Microsoft, you can go ahead and set this up as well. 01:26.020 --> 01:28.050 I'm not going to demo that in this particular case. 01:28.380 --> 01:34.350 But if you are using ETFs or Microsoft Azure, you have the ability here as well. 01:34.380 --> 01:39.240 So, again, another example of a place where you've got some or more of these enterprise features that 01:39.240 --> 01:41.940 you can integrate into some of your device management. 01:43.560 --> 01:44.950 Information here as well. 01:45.000 --> 01:51.090 I have all these disabled, but you can enable these this shows student progress on particular course 01:51.090 --> 01:51.630 assignments. 01:51.630 --> 01:56.370 You can enable that for your faculty face time and messages by default. 01:56.370 --> 02:03.060 Any of these managed apply IDs that you'd be providing do not allow for face time and messages. 02:03.060 --> 02:05.580 But you can turn that on one thing to note. 02:05.580 --> 02:10.590 And if you hover over this, you'll actually see one of the things you can't actually inspect any of 02:10.590 --> 02:11.460 the conversations. 02:11.470 --> 02:17.010 So if you're turning on Apple messages, you have to understand that those conversations between individuals 02:17.220 --> 02:22.080 are basically encrypted and not available to be looked at or monitored. 02:23.190 --> 02:25.200 Same thing here with data access and privacy. 02:25.200 --> 02:26.760 You can turn this on as well. 02:27.000 --> 02:30.980 And then users can store files with those Apple IDs. 02:31.170 --> 02:38.520 So that's sort of things to add their data source, you can actually install and connect student information 02:38.520 --> 02:39.900 systems back to this. 02:39.900 --> 02:41.120 I'm not going to get into that here. 02:41.130 --> 02:43.440 There's just too many systems out there. 02:43.650 --> 02:47.580 This may not really apply to anyone outside of a school institution. 02:47.760 --> 02:52.290 I would recommend, if you're planning to do something like this, that you consult with your Apple 02:52.290 --> 02:54.770 representative in your particular area. 02:56.450 --> 03:02.000 And what I really wanted to get into is this Tabora hear device management settings, so this is actually 03:02.000 --> 03:04.460 where you can pull in all the devices. 03:04.460 --> 03:09.430 And I mentioned in a previous lesson that it keeps a database of all of these. 03:09.460 --> 03:10.430 So what does that look like? 03:10.460 --> 03:14.570 Well, in this case, I've got 62000 devices. 03:15.020 --> 03:21.440 And if I take a look at it, I've got them separated out here into a couple of different MDM servers. 03:21.680 --> 03:25.850 And so, you know, we went through the Apple configurator setting. 03:25.850 --> 03:30.800 There was a spot where you could upload or add a device. 03:30.800 --> 03:32.900 Let's say I purchased a device on retail. 03:32.900 --> 03:36.990 I didn't purchase it through, you know, Apple Direct. 03:37.040 --> 03:41.150 So it didn't get automatically added to my DSP. 03:41.150 --> 03:43.070 But I still want to be able to manage it over the air. 03:43.310 --> 03:45.590 That would allow me to plug it in Apple configurator. 03:45.590 --> 03:52.280 And remember, there was that setting for managed devices were basically provisioning the account and 03:52.280 --> 03:54.380 I can say, you know, supervise it. 03:54.380 --> 03:59.810 And also there was a checkbox to add it to DSP and we didn't do that because my device I was testing 03:59.810 --> 04:01.250 with it was already in DSP. 04:01.430 --> 04:05.000 But if I chose to choose that, that's where these would show up in here as well. 04:06.450 --> 04:13.350 I've got an MDMA server here that's set up for some subset of my devices, and then I have all my other 04:13.350 --> 04:18.720 devices here, and if you take a look at this, you can see it's one Apple TV, fifty thousand one hundred 04:18.720 --> 04:23.910 ninety nine iPads, ninety three iPods, seven hundred and seven thousand eight hundred and sixty four 04:23.910 --> 04:24.300 Macs. 04:24.570 --> 04:32.460 And I can download a CSV of all that that shows the model and tells me if it's a Mac or an iPad or an 04:32.460 --> 04:39.960 iPod or an Apple TV, it doesn't actually tell me which model iPhone or sorry iPad or Mac that it is 04:39.960 --> 04:40.470 unfortunately. 04:40.470 --> 04:44.880 But it does give me the serial number and I can look that up if I needed to for any given device. 04:46.320 --> 04:49.590 So there's my information here, I can take a look at that. 04:50.580 --> 04:54.060 We'll get into more of these tokens and MDM stuff a little bit later. 04:54.240 --> 05:00.240 But I wanted to point that out that that's where these are at and that's what comprises this device 05:00.240 --> 05:00.960 management setting. 05:00.960 --> 05:06.690 And you can see here, if I hit at it on our customers, it'll show me my customer numbers. 05:06.720 --> 05:08.580 So those were two different customer numbers. 05:08.580 --> 05:10.590 I used to purchase these devices from Apple. 05:10.620 --> 05:15.810 And again, you really need to work with your Apple rep to set this up initially for your organization. 05:17.270 --> 05:22.100 And then you can also add DP reseller IDs as well, if you're buying them through a bar or something 05:22.100 --> 05:22.640 like that. 05:26.440 --> 05:32.410 And then right here, we've got the default device assignment, so you can edit this and you can choose 05:32.560 --> 05:37.180 which of these MDM servers you want to automatically on board these devices into. 05:37.180 --> 05:39.220 And we'll get into that a little bit more later as well. 05:39.220 --> 05:40.710 But that's what this is for here. 05:43.060 --> 05:49.450 And once we've got a device management settings all configured here and we've got our customer numbers, 05:49.780 --> 05:53.470 we've got all of our devices and those things are ready to go. 05:53.500 --> 05:54.310 It'll synchronize. 05:54.310 --> 05:56.080 If this is the first time you've done so, we'll synchronize. 05:56.080 --> 06:02.440 It may take some time, but eventually it will populate the database with all the devices that you have. 06:02.470 --> 06:07.060 So at that point, we're going to take a look at this device assignment option here. 06:08.320 --> 06:13.870 So this is where you can actually start to look up devices out of those, you know, however many hundreds 06:13.870 --> 06:18.230 of thousands of devices that you may have and you can start to search them. 06:18.250 --> 06:22.900 So I'm going to go ahead and enter in serial number here for a random iPad. 06:24.190 --> 06:30.010 So in that loads up, you can see it's found an iPad with that serial number in the database and it's 06:30.040 --> 06:32.230 actually very nice and provides an order number. 06:32.290 --> 06:38.650 Now, one of the places I use this order number a lot or have in the past anyways, is if I'm trying 06:38.650 --> 06:44.110 to deal with an activation lock situation and I need to prove proof of purchase when I'm dealing with 06:44.110 --> 06:49.690 that support ticket, providing that order number is enough of a proof of purchase for them to identify 06:49.690 --> 06:56.560 that the device actually does belong to me and then can go through the process of deactivating the activation 06:56.560 --> 07:05.470 lock if I needed to do that gives me the option to assign it to an MDM server and or reassign it if 07:05.470 --> 07:07.360 it's already assigned to one as it is in this case. 07:08.670 --> 07:13.290 In show when it was assigned to that MDM server, sometimes this, you know, if you've got this already 07:13.290 --> 07:19.920 set on board into an MDM server at the time that the device is added, this this is works as well as 07:19.920 --> 07:21.930 basically a date and time of purchase. 07:22.200 --> 07:27.690 So this is the time when it's basically gone through the purchase process with Apple and the Shipped 07:27.840 --> 07:29.750 and it knows what devices are coming to me. 07:30.000 --> 07:34.950 It goes ahead and assigns those pretty much the same day into the solution. 07:34.950 --> 07:37.910 So you can start seeing those at shipment of. 07:37.950 --> 07:42.540 The last thing I'll point out as this release device is button, I wouldn't click that unless you're 07:42.540 --> 07:43.590 selling this device. 07:44.710 --> 07:50.410 A best practice is that if you're going to sell the device somewhere outside of your organization, 07:50.620 --> 07:52.570 you want to go in and release the device. 07:52.780 --> 07:56.620 Essentially what that means is you'll no longer be able to control it, which is good because you're 07:56.620 --> 08:03.250 not going to accidentally apply an MDMA profile or any kind of restrictions to someone else's device 08:03.250 --> 08:04.040 after you've sold it. 08:04.210 --> 08:08.560 So it's good for the person who's buying the device from you, but also keeps your database clean. 08:08.860 --> 08:11.520 And it's a best practice if they ever need to get support. 08:11.740 --> 08:15.340 It's not continue to be tied back to your organization. 08:16.610 --> 08:22.140 So anyway, I'm going to just say down to that, and so that's how you can look up, manage an ad, 08:22.140 --> 08:28.040 and you can do this also by adding multiple devices here and comma, separate them or upload your own 08:28.040 --> 08:33.710 CSV file if you want to, so you can download a template file, you can populate it and then you can 08:33.710 --> 08:36.250 upload it and then you can do this in mass. 08:36.290 --> 08:40.460 So this allows you to upload a list of hundreds of thousands of devices. 08:41.770 --> 08:48.730 In here and then easily choose what you want to do with them, release them or add them to a specific 08:48.730 --> 08:51.520 MDM hit, OK, and we'll assign it. 08:52.410 --> 08:56.970 Other things that you can do within Apple school manager that I'll just highlight briefly, I'm going 08:56.970 --> 08:57.940 to go to rolls here. 08:58.140 --> 08:59.770 These are pre populated rolls. 08:59.790 --> 09:05.040 Again, yours may be different if you're using Apple business manager, but this is really set up for 09:05.520 --> 09:08.220 a school and an education institution. 09:08.220 --> 09:13.590 So you've got your administrator group and it just gives you a good idea down the list here, all the 09:13.590 --> 09:15.750 things that the administrator can do. 09:18.420 --> 09:22.950 Gives you site manager, if you're using iTunes, you. 09:24.590 --> 09:31.250 And then it goes all the way through device manager for Deep Content Manager, if you're going to delegate 09:31.880 --> 09:37.340 the purchase of apps and books to somebody else in your organization, you can give them content manager 09:37.760 --> 09:38.510 privileges. 09:39.050 --> 09:43.070 And then you've got your instructors, your staff and your students, and it has the information in 09:43.070 --> 09:43.890 there as well. 09:44.570 --> 09:49.420 So all of that those are all the different roles that you can assign to different user accounts. 09:49.940 --> 09:52.640 And here you're basically just creating an account. 09:52.970 --> 09:56.750 You can provide them a managed Apple ID, you can give them a role. 09:59.060 --> 10:05.120 So you have a lot of options here when creating these accounts inside the system, or like I showed 10:05.120 --> 10:07.570 earlier, you can import those accounts in for measure. 10:08.240 --> 10:10.820 You can also import information from your SS. 10:16.690 --> 10:22.510 Go to locations, you're going to add multiple locations, so if you've got multiple campuses in this 10:22.510 --> 10:27.700 case, you can add all the campuses in here with different things and set up different password policies 10:27.700 --> 10:30.060 and other items on a per campus basis. 10:35.550 --> 10:40.620 And you can use iTunes, you and you can enable the course manager here, which we'll talk about later, 10:41.010 --> 10:43.860 or use the public site manager. 10:43.860 --> 10:46.350 If you are going to have an iTunes U. 10:46.920 --> 10:55.770 Public course or public instance inside the iTunes you app where potential students or even the outside 10:55.770 --> 11:03.810 public can browse and view your courses that you allow to be published out onto the public iTunes site. 11:06.530 --> 11:14.090 So that's basically the overview of Apple school manager and how you would use that to look at your 11:14.090 --> 11:22.310 devices, look up, assign them to emblems or view the purchase information, proof of purchase, purchase, 11:22.310 --> 11:23.690 date and so forth.