This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

new SMC user/deployment

HI,

I have only a couple of questions, and hope that folks here can offer some advice.

Firstly. I would like to avoid as much user interaction as required. Only because walking users through the setup process via the SSP would only serve to confuse them and make the process more difficult. I see that in the App Store you can download the Mobile control app. Once installed you can simply plug in an Activation Code and the URL for the server. Whenever I do this it fails? Any suggestions as to why or where to look? I have tried the iPhone Config Utility, it doesn't show much.

Secondly. When I get a user setup and their device registerd via the SSP, the task bundle that is pushed out installed the SMC client. I do not see anywhere to prevent this app from being uninstalled from the iPad. Is it possible to prevent the uninstall of the Mobile control app?

Thanks,

aaron.

:52703


This thread was automatically locked due to age.
  • Hi Aaron,

    the Sophos Mobile Control client app which can be downloaded via the AppStore is not sufficient to support all MDM functionalities. A special mobile device management profile has to be installed on the device which is also called a "bootstrap".
    This is typically the first task in a task bundle and also part of the example configuration which is created when installing the Sophos Mobile Control server.

    For a future release it might be possible that scanning a QR code will result in the installation of all necessary profiles and everything is done afterwards automatically.

    Right now, you either have to ask your users to run through the SSP or you can add them manually to your server and then send out all required information to the device / the user.

    Please check the chapters 14 and 15 of the SMC administrator guide for additional information.

    Regarding the uninstallation of apps, you cannot deny that by default.

    Only if the device is in the so called "supervised" mode. However, this requires additional steps for you as the administrator and all devices have to be connected via USB to a MAC having the "Apple Configurator" installed. As this procedure requires a wipe of the device I am not sure if that is what you want. ;-)

    Hope this helps.

    Best regards

    Stefan

    :52793