The very first thing we're going to do is start to play around with Moule config profiles, mobile config
profiles are basically of settings that you can set and then apply to devices to get a consistent experience
or to provide some sort of limitations or restrictions without having to touch every single device.
So we're going to go up here to the file menu and hit new profile, get started.
And this is what this looks like, you have if you haven't seen mobile config profiles before, this
profile editor basically gives you a list of all the different things you can configure.
And then apply to your iOS devices.
So the first thing we're going to do, there are some here that say not configured.
There's some of the same mandatory general, always mandatory.
So we're going to go in here and just do a couple of basic things.
Identifier here, we're just going to change this as well.
Really just has to be unique identifier.
So if I'm having this profile given to users and they have to install themselves like, say, for example,
I hosted on a Web page and then I'm asking my users to navigate to the Web page to select the profile,
there's going to be a message that pops up when they go to add it to their device.
And that's what this message messages.
So you can put this in and or you cannot.
If you're automatically applying the mobile config profiles during onboarding with configurator, then
it really doesn't matter what the message says.
Same thing if you're using an MDM to automatically push these out.
I'm just going to go ahead and say.
You know, this is the basic profile.
So this is where you can go in here and say when these profiles can be removed, so if you want, you
can say never.
Or you can say with authorization, and that would require a password.
But I want to point out here, it does specifically say supervised only.
So if your devices are already supervised, they can't be removed.
If your devices aren't supervised.
It's going to be removed anyways.
So I'm going to say that they can always be removed for right now.
What you'll probably want to do if you're providing supervised devices, which likely if you're on boarding
all these devices into Apple configurator, that's kind of the idea you would want to do with authorization
that will allow your technicians or yourself to remove them if you need to, to apply a new one.
But keep your users from from removing any of these settings that you place on them.
And then you can also have an automatically disable, remove or essentially expire these at a specific
date as well.
So we're going to go ahead and leave these as default for the moment, so then we can start looking
through what are some of the things that we can set up.
So I'll start with restrictions, and I highly recommend that you guys go through and look at all of
these, because there's a lot that you can do in here, a lot more than I have time to kind of run through
and you have time to watch me do in the video.
It's far, far better for you to download configurator and play around with this yourself to see what
might work best in your environment.
But I will give you just a few pointers on some things.
So I'm going to hit restrictions.
I'm just going to hit configure.
And this allows me to configure this.
And you can see here I have one payload listed here, a payload as essentially a setting.
So you'll see this as you start to configure these.
If I change my mind and I'm like, oh, wait, I don't want to do any of this, you can always hit the
minus right here and then I'll remove it so you can see it goes back to not configured.
So really safe to just go in here and play with this.
So you see there is a lot of granular control here over all of the different settings that you can do.
Now, I want to point out that there are a little notes here.
Some of these are only available if the devices in supervised mode.
So you may want to say allow adding VPN capabilities.
Well, I don't want anybody adding any VPN connections to these devices.
If you aren't on board your device as supervised, this will not apply and won't even matter if this
is checked or not.
And that's the case for any of these.
I say supervised only.
So you want to make sure that you're applying these profiles to devices that are supervised if you plan
to use the restrictions that are require supervision.
So there's just a ton of stuff in here I'm going to keep all the defaults here and I'm going to basically
say.
You know, require a pass code on first airport, airplane parent.
I don't care, I just said it a check one of these to make it different.
But you can go through this and see how how you which ones of these you may want to set up.
And there are different tabs.
So you have to look through this as well.
So you have the option here as well to turn off things like game center or the iTunes store.
You can choose when to accept cookies and if these are supervised only you can also go in here and adjust
which apps are allowed as well as far as restricting app usage.
So.
You can choose the app, search for it.
But for now, I'm just going to leave that out, we'll just allow a lapse and then same thing with media
content and you can do the content ratings as well.
So a lot of what we had shown in a previous lesson on the restrictions you can set up directly on the
iPad.
You can now do this one time in Apple configurator and apply this configuration setting to all the devices
that will save you some time.
Another one I want to show is wi fi.
A lot of organizations have wireless networks that are, quote unquote, enterprise, which are a lot,
maybe a little bit harder for the average user to join.
Maybe you have certificates.
Maybe you have to use a specific kind of wireless protocol you can onboard all of that in here.
And you can provide a much easier experience for users on your supervised devices or even unsupervised
devices, for that matter, to join the wireless network at your organization.
So I'm going to put one in here.
And so this is the idea of our network, our student network, and this is not a broadcast network,
we actually don't want anyone on this network except those that are using the iPads that we provide.
So it's actually a hidden network.
So I'm going to choose that.
I'm going to choose to join it.
And it's currently I don't have a captive portal, but if I did have a captive portal, I have an option
here as well to bypass the captive network detection.
So instead, I would have if I uncheck this and I had a captive portal, I would force my users to have
to go to Safari or Chrome or some other browser on the device to log into the captive portal.
I've got no proxy, but I do have wireless encryption and I actually have to enterprise, so I'm going
to select that and now I've given protocol.
So this is where this becomes more difficult for your end users.
And this is actually a network here.
And I have the option here to put in the username and password.
And so I've actually got a service account that I've set up on my wireless network just for onboarding
iPads.
So it's going to be.
And now I can put on my password here.
And that looks good.
So that will allow everyone to join the device and then if I have certificates, I don't have a certificate
I need to add it will actually install a certificate when it first connects to the network.
But if your wireless network requires a certificate, you can also add your trust certificate names
here as well.
So this will allow you to greatly reduce the headache that comes to onboarding devices onto like a WPA
to enterprise network.
That's the one that you operate.
So the last thing I want to show is Web clips.
Go ahead and configure.
So one of the things that you probably have people come to you and say, hey, I really want an app.
They're going to tell you they want an app.
It's probably what they really want is a shortcut, but they'll tell you they want an app to a particular
website.
Or you may want to provide a link to maybe your help desk or something right from the home screen of
the iPad, rather than having to configure safari bookmarks and all these other things.
So there's really a cool way to do this using this Web clips.
So you can see I've got a couple of requirements here.
So first, we have to name we have to provide a label that's going to be the name of the icon.
I'm going to call it Help Desk here and then you need to have your URL.
And I'm just going to do support dot my company dot com.
You can choose whether you want it to be removable or not.
So I'm going to leave it as removable in case something like, I don't know, we're going to use that
or whatever, but you may actually want to keep it on there.
If it's something where you feel like you're going to keep adding it all the time, you can choose an
icon.
So I'm just going to go ahead and do this help desk icon that I've got.
You can choose whether you want it to be pre composed or not that basically will turn on or off the
added visual effects that iOS puts on it.
If you're in any kind of a iOS developer, you'll have come across this before and Xcode and then full
screen is it displays that as a full screen application.
So that might be helpful if you're looking at using that access or single app mode on the device.
But we're going to leave those unchecked and now.
I've got these as listed here.
So what will happen when I install this mobile config profile is it's going to set up my genetic information
here.
It's going to provide this payload where I basically just required a passcode the first time using airplay.
It's going to join it to my wireless network automatically using this service account and password and
the and the proper protocols, and it's going to apply my helpdesk link as an icon on the home screen.
So I'm going to go ahead and save this and we'll call it my company, that mobile config.
So I've saved that profile now what's really cool about this whole config profile at this point is I
could basically put it on our website, put it in iCloud drive, email it to the user.
Anyway, I want to manually distribute this mobile config profile to get it onto a device that would
then need to have these settings set up.
So you have the option to do that.
The other thing I want to talk about real quick before I finish up my little lesson on mobile config
profiles is you want to start to strategize the best way to configure this and what you want your devices
to look like.
So what I mean by that is so I want all my devices to look exactly the same.
Do I need some devices that are configured with less settings and less restrictions and some with more?
Or do I have specific things that are unique for a department?
So, for example, I might want Wi-Fi and, you know, maybe no restrictions and my mandatory general
information to be the same and my helpdesk icon, I may want that on every single iPad in my organization.
Right.
So I'm going to go ahead and save this.
So that's my company, not Momoka thing.
That one gets applied to all devices regardless.
Now, I may also want just to have iPads for the math department.
And the math department also wants in addition to this particular helpdesk icon that I want on there,
they have a list of five other math related websites that they want added to the home screen as well.
You could put that in all of them and just tell everybody, hey, ignore the math ones or delete the
math ones that are removable after all.
But that's not very nice.
That's not very easy.
And we we can do better than that.
So we can create another one and we can just do me a new profile again.
And this one, we're going to basically call this one math.
We'll call it math profile.
Right.
And we'll change this again to my company and all that good stuff.
And we can put these things in here as well.
And math department may be right and that kind of thing, right, and then we can just skip all the
other stuff because we've already got it on the other Profilet, we go right to Web clips, we configure
and now we can start putting on here, you know, math mathematic.
I have no idea if that's a place, but we could just, you know, put in here WW math dot com and we
can drop an icon in here and, you know, we can add another one.
And so you just keep going right down the list.
Put those five math related websites in that the math department wanted.
Save this one as.
You know, math profile, right, and hit save now what I can do on those math iPads is I can go ahead
and lay down my company and then I can lay down math profile.
And for everybody else, I just lay down my company.
So start to think about how you may want to layer these mobile config profiles to not require one monolithic
profile or to manage a ton of different monolithic profiles.
So it's that way if something changes, let's say, for example, the wi fi changes, you only have
to go and change one profile that provided Wi-Fi rather than having to keep up with 20, 30, 40, 100
different mobile config profiles that all have the wi fi information listed in there.
So that makes sense.
That's what you want to start to think about, because you can layer multiple profiles in on top of
each other to make unique experiences per device group.
That's mobile config, big profile.
In the next lesson, we'll talk about how to add those profiles to prepared devices and build blueprints
for deploying those and managing them.