Understanding MDM Models for iPad Deployment

There are three basic management models Apple refers to in regards to mobile device management (MDM,) the centralized model, the personal model and the layered model.

Empowerment distinguishes one model from another. The personal model it is all about empowerment and creativity, while the centralized model it is all about restriction and consumption. Pros of empowerment are end user control of all content and access to all content. Con of empowerment: we can't protect a user from themselves.

Centralized Model

• Empowers Institution
• Most Labor Intensive Deployment Model
• Institution Purchases Apps via VPP/App Store
• Institution Retains Ownership of Apps
• Content Managed in iTunes
• Connectivity - Computer or WiFi 

In the centralized management model the empowerment belongs to the institution (school) and the institution owns and manages all aspects of the iPad. This includes initial sync, updates, profile setup and restriction codes if deemed necessary.

Syncing multiple devices to a centrally controlled iTunes account gives education institutions the most control over the apps, content, and the end user experience on each iOS device. Groups of iOS devices are synced and maintained from the same iTunes library on a sync station, which is a computer controlled by the institution. Each iOS device must continue to be synced with the original iTunes library from which it was configured in order to receive new or updated apps purchased by the institution.

Once iOS devices have been paired with a sync station, attempting to sync apps or other content with another computer will cause iTunes to notify the user that the apps and content from the institution’s sync station must be erased from the device before the new computer can sync to it. A student missing all of the institution’s curriculum apps will quickly stand out when he or she is unable to participate in class projects requiring those apps.

WiFi sync is available in this model to make the updating process smoother and less time consuming. 

One benefit of the centrally managed iPad is that the school retains the ownership of paid applications.  Only one voucher code is needed to install applications on any number of iPads. Note:  Under the new iBooks service agreement, books are not to be installed on institutionally owned iTunes accounts. 

Personal Model 

• Empowers End User
• Simplest Deployment Model
• End User Retains Ownership of Apps
• Institution Treats Apps as Consumables
• Content Managed in iTunes or iCloud
• Connectivity - Computer/WiFi

In the personal management model the end user controls the initial setup, iPad settings as well as the app store experience.  The only role the institution has in deploying this model is to distribute iPads to students. The personal sync strategy has the least impact on an organization because the care and maintenance responsibilities are shifted to the end user, and users may be more protective of assigned devices if they can personalize them.  

Layered Model

The layered model blends the institutional model and the personal model to best meet the needs of the organization and end user.

Initially, the institution preloads institution owned applications and profile settings and restrictions onto the student iPads.  Management and configuration tools can be used as part of this deployment to allow the institution to control the settings and configuration of the device. The end user is then responsible for setting up the iPad, backing up data, and further enabling restriction settings if institutions so choose. 

Users log into the App Store with a personal Apple ID.  Students under the age of 13 would require a parent generated Apple ID per Apple’s newly updated user agreement.

To use any of the Services, you must be at least 13 years old (or, for non-U.S. users, such older minimum age as may be required by applicable local law). If you are under the required age, you may still use the Services (subject to applicable local non-U.S. law)but only if the account you are using was created and registered by your parent or legal guardian.

The layered model is a necessity if textbooks are going to be distributed to a school via the iBooks App.  Under the new iBooks Store service agreement, institutions may purchase apps through the volume purchase program but may the codes may only be redeemed on personal Apple IDs.  This forces all users to have their own personal Apple ID.  And, since, the iTunes Apps Store User Agreement has been revised, parents may create these Apple IDs for students under the age of 13.  In essence, Apple is forcing the use of the layered model upon institutions who choose to use textbooks sold through the iBooks Store.

Choosing A Model/Sync Strategy

Choosing a model for your school is perhaps the most important decision to be made prior to implementing a 1:1 iPad.  The questions below form a basic decision tree to assist in selecting a model. Select the model or models that meet the most requirements and keep in mind that multiple strategies may be used across an organization.
Application Installation: Who will be allowed to install apps?

• School only: Consider a centralized sync model. 

• Student only: Consider a personal sync model. 

• Both: Consider a layered sync model. 

Application Updates and Deletions: Are applications allowed to be modified and new ones installed?

• Yes: Consider any sync strategy.

• No: Consider a centralized sync strategy. 

Device Update Frequency: How often should apps or iOS versions be updated on the devices? 

• Frequently: Consider a layered or personal sync 

• Infrequently: Centralized or Layered

iTunes Syncing, Backup, and Restore: Which computer will be used for syncing and backups? 

• School-owned: Consider any sync strategy.

• School/Personal:  Consider the Layered Model

• Student-owned: Consider a personal sync strategy.