繁體中文Support – Admin Console (iOS)
FAQ
FAQ (iOS - Admin)
2. Select Devices > Select Apps > Confirm
To release the lock, Device > Device Management > Bulk Action > Lock > Apps Unlock > Select Devices > Confirm
2. Select Devices > Select App > Confirm
To release the lock, Device > Device Management > Bulk Action > Lock > Apps Unlock > Select Devices > Confirm
| Profile Names | Functions |
| Disable AppStore/Apps Install/Remove | Disable AppStore, install Apps and Remove apps. |
| Rescue WiFi | Default wi-fi profile. SSID is “rescuewifi” and password is “eschoolpad” |
| Disable Camera | Disable Camera. Impact: other apps will be hidden if need camera function, e.g. Facetime |
| Disable GameCenter | Disable Game Center. App will be hidden. |
| Disable Social Account Settings | Disable Apple ID for login. Impact: iMessage will hidden, Appstore disable. |
| Disable iMessage | Disable iMessage. App will be hidden. |
| Disable AirDrop | Disable AirDrop function. |
| Disable Safari | Disable Safari. App will be hidden. |
| Disable Podcasts | Disable Podcasts. App will be hidden. |
| WebFilter (Youtube/Facebook/Weibo) | Not allow User to access Facebook, Youtube, Weibo website. |
| Disable Facetime | Disable Facetime. App will be hidden. |
| Use Password for AirPlay | Request Password if use AirPlay. |
| Disable User Restrictions (Screen Time for iOS 12) | Restrict Screen Time setting. (iOS 12+) |
| Disable ScreenShot | Disable ScreenShot function. |
| Disable Apple Music. | Disable Apple Music. App will be hidden. |
| Disable All | All Apps will be Hidden, only Settings and ESP app shown for use. |
| WebFilter (Facebook/Weibo) | Not allow User to access Facebook, Weibo website. |
| WebFilter (Youtube) | Not allow User to access Youtube website. |
| Disallow installing configuration profiles | Disallow install profile from ac2 / download from internet. |
| Disable Location Service | Disable Location Service. |
| Disable Enterprise Apps | Removes the Trust Enterprise Developer button in Settings > General > Profiles & Device Management |
| Disallow App Removal | Not allow User to Remove apps, just remove from Home Screen. |
| Disallow Siri | Disable Siri function. |
| Disallow Change Device Name | Not allow User to change the Device name on iPad. |
| eSchoolPad Notification Lock | Not allow User to change the notification setting of ESP App on iPad and keep it Turn On. |
| Disallow Modify Passcode | Not allow User to change the passcode.Face ID, Touch ID and Passcode feature will be hidden. |
| Disallow Erase Content and Settings | Not allow User to erase content and settings, that disable in Settings> General. |
| Disable AppStore | Disable App Store. App will be hidden. |
| Disable Bluetooth Modification (iOS 10 Only) | Restrict Bluetooth setting. (iOS 10+) |
| Disallow LockScreen Control Center | Prevents Control Center from appearing on the Lock screen |
| Disallow Notification Modification | Not allow User to change the notification setting for All Apps on iPad, and keep it on latest status. |
| Hide Apps: Family/Find iPhone/Photo Booth | Hidden for Family (new version changed to Home), Find iPhone and Photo Booth. |
| Disallow Wallpaper Change | Not allow to change the device’s wall paper. |
| ForceJoin Classroom app (Adhoc/Unmanaged mode) | 1. automatically gives permission to the teacher’s requests without prompting the student. 2. allows the teacher to lock apps or the device without prompting the student |
| Delay iOS update (90 days) for iOS 11.3+ | Default iOS update profile, that delay for 90days. (for iOS 11.3+) |
| [Preset] Office365 Mail (for BYOD) | preset Exchange ActiveSync account to device (email)(for BYOD) |
| [Preset] Google Account (for BYOD) | preset Google account to device (email)(for BYOD) |
| Force AutoDateAndTime (iOS 12+) | Force device’s date and time as Set Automatically. (iOS 12+) |
| Block myTV [webfilter] | Not allow User to access MyTV website. |
| Block instagram [webfilter] | Not allow User to access Instagram website. |
| Disallow_Stock_Measure_VoiceMemos | Not allow to use Stocks, Measure and VoiceMemos. Apps will be hidden. |
| ParentApp Webfilter | Used by parent mdm / parson. no effect if install from admin console. |
| Disable Auto-correction | Disable Auto-correction on Keyboard. |
| Disallow Predictive Keyboard | Disable Predictive on Keyboard. |
| Auto Filter Adult Content | Turn on webfilter for Adult Content. Effective on Whitelist, Blacklist and Permitted URLs on ESP Console > Settings > School Policy > URLs |
| Disable USB restricted mode | Disable USB restricted mode. |
| Force Wifi On (iOS 13) | Force Wi-Fi setting on, and user is unable to turn off. |
| Block Shortcuts app (iOS 13) | Disable to use Shortcuts. App will be hidden. |
| Disallow Trust Computer (Disallow connect via USB) | Not allow User to connect computer via USB, impact: cannot use Apple Configuator or iTune to reset Device. |
| Force WiFi Whitelisting (Only allow WiFis managed in MDM) | Force Wi-Fi setting on, that WiFis whitelist in MDM. |
| Disable All Restrictions (with webclip) | All Apps will be Hidden, only Settings (limited function and settings) and ESP console shown for use. |
| Disallow VPN Creation | Not allow User to add new VPN configuration. |
| Disallow modifying Touch ID / Face ID | Not allow User to modify Touch ID or Face ID. |
| Disable AppClips (iOS 14) | Prevents a user from adding any App Clips, and removes any existing App Clips on the device. |
- First create a profile with web clip :
- Go to Profile > Create New > Web Clip
- Provide Profile Name, and tab + New Configuration button
- Select Web Clip from the drop-down
- Provide Label, URL and Icon Image
- Tab Save button
- Then, push onto target devices :
- Select target group of devices in device management Devices > Device Management
- Bulk Actions > Settings > Install Profiles
- Confirm the group of devices
If ESP MDM license terms is soon to expire, a reminder will appear on the top bar as below. Please take action to renew at your convenience.
The page details the license summary and subscription history.
“Settings” > “ESP MDM License”
For those DEP devices purchased through Apple Education Reseller, we recommend to adopt the following workflow:
This process will involve wiping device and administrative work in your Apple School Manager (ASM) account. So please sync the data properly and get ASM login info ready.
- Log into your ASM account and unassign the device with the Serial Number
- Wipe Device :
- “Device” > “Device Management”
- Select the device
- “Action” > “Advance” > “Wipe Device”
- Remove the Device from your Devices List :
- “Device” > “Device Management”
- Select the device
- “Action” > “Advance” > “Delete Device”
- “Profile Management” > “Create New” > “New Configuration” > Select Wi-Fi > Provide Wi-Fi info and Turn on Disable Association Mac Randomization > “Save”
- “Device” > “Device Management” > “Bulk Action” > “Settings” > “Install Profiles” > Select Devices > Select the Wi-Fi Profile just created > “Confirm”
1. Login to Google Suite (Education) https://admin.google.com
2. “Device management” > “Password Settings”
3. Then uncheck the box labeled “Require users to set a password”
First, you will need to restrict showing apps and/or web clips:
- Go to “Profile” > “Profile Management” > “+ Create New”
- Provide “Profile Name”
- Click “+ New Configuration”
- Select “Apps”
- In Whitelisted Apps, search and select app(s) you just want to show. (Please make sure these apps have been installed onto the iPads)
- Click “+ New Configuration” again
- Select “WebClip”
- Provide WebClip information. (Please make sure “com.apple.webapp” has been added into Whitelisted Apps)
- Click “Save” to proceed
- Go to “Device” > “Device Management”
- Click “Bulk Action” > “Settings” > “Install Profiles”
- Select the profile you have just created above
Please try the following steps to unlock：
- “Device” > “Device Management” > Select the Device > “Action” > “Advance” > “Enable Lost Mode”
- “Device” > “Device Management” > Select the Device > “Action” > “Advance” > “Disable Lost Mode”
Somehow, you have applied Adult Content Filter Profile, and you experience some URLs blocking. Please note that the Adult Content Filter Profile is based on Apple’s filtering logic. But you can set exemptions to allow URLs.
There are 3 steps:
- “Setting” > “School Policy” > “URLs” > “Permitted URLs” > Please provide URLs which you want to access > “Save”
- “Device” > “Device Management” > “Bulk Actions” > “Advance” > “Set School Policy” > Select Devices > “Confirm”
- “Device” > “Device Management” > “Bulk Actions” > “Settings” > “Install Profiles” > Select Devices > Select Profile “Auto Filter Adult Content” > “Confirm”
Tips：
Please use main domain instead of full link, eg:
- eClass.hk covers
- www.eclass.hk
- www1.eclass.hk
- sub.eclass.hk
- It is because you trigger Normal Install for VPP Apps
- Please try again with VPP Install
This mostly happens to those Apple Native Apps (Clips/Keynote/Pages/…..), and apps not installed via MDM.
- “Device” > “Device Management”
- Select a Device
- In device detail page, tab “Apps” > Check the far right column
To switch apps to manage, go to
- “Device” > “Device Management”
- Select a Device
- “Actions” > “Apps” > “Manage Apps”
- Select the Apps you want to manage
- “Confirm”
ESP supports more than 1 VPP account. That is you can use multiple Apple ID accounts to purchase VPP Apps in ASM, provided these accounts are under 1 single school.
Please follow the steps below to add VPP Accounts :
Download Token from ASM
- Access school.apple.com with the new Apple ID
- Go to VPP and download token and save onto your PC/Mac machine. (the file should be with .vpptoken as an extension)
Upload Token to ESP
- Go to “Apple” > “VPP” > “VPP Setup”
- Type a new Apple ID used for purchasing VPP Apps, and tab “Browse” button
- Upload the .vpptoken file which you have downloaded in Step 2 above
- Tap “Save”
- The newly added VPP account will be added in VPP Accounts section above
There are 2 possibilities :
- Sync VPP Apps
- Go to “Apple” > “VPP” > “VPP” Apps > tab “Sync VPP Apps” button
- Our system will instantaneously call Apple’s VPP Server and ask for the latest update
- Incorrect VPP Account
- Go to“Apple” > “VPP” > “VPP Setup”
- Check if the account used for purchase is in the VPP Account list. If not, please add, or use the account listed to purchase in ASM again
If you would like to clear browser history and website data in Safari, please consider to
- Uninstall a profile “Auto Filter Adult Content“, and
- Keep the “Settings” > “School Policy” > “URLs” > “Blacklisted URL” EMPTY
To Uninstall a profile, please go to
- “Device” > “Device Management”
- “Action/Bulk Actions” > “Settings” > “Uninstall Profiles”
- Select a profile
- “Confirm”
To check Blacklisted URL, please go to
- “Settings” > “School Policy” > “URLs” > “Blacklisted URL”
To hide instead of uninstall those Apple Native Apps, such as Calendar, Voice Memo, Stocks, etc. you can:
-
- In Admin Console, go to
- “Settings” > “School Policy” > “Apple Native Apps”
- Switch on the App(s) you want to hide
- Tab “Save”
- In Admin Console, go to
- Go to
- “Device Management”
- “Bulk Action” > “Advance” > “Set School Policy”
Applying profile “Disable Social Account Settings” onto the devices will prevent students from logging in.
In Admin Console, go to
- “Device” > “Device Management”
- “Action/Bulk Action” > “Settings”
- “Install Profiles” > Select “Disable Social Account Settings”
Apple Native Apps, including Calendar, Map, TV, Voice Memo, and many others, come with iPads. Sometimes, they are not managed by MDM or have a problem to open for use. In this case, you may consider:
- Delete the Apps manually from the iPads (you may need to remove profiles “Disable AppStore/Apps Install/Remove”, “Disallow App Removal” and unset Homescreen Layout)
- VPP Install the Apps again
ESP directly synchronises with your ASM account DEP once you trigger Update DEP.
Please check the following 3 issues :
- ASM login ID is consistent with the one used for DEP
- Please change the ASM password back to the previous one
- DEP token not updated, please update the token again
For some unmanaged apps, e.g. Apple native apps Garageband, Numbers, you may need to remove them manually from the iPads.
To remove apps manually, please make sure the following 3 profiles are inactive:
- Disable AppStore/Apps Install/Remove
- Disallow App Removal
- Disable AppStore
If you have set Homescreen Layout, please unset –
- “Devices” > “Device Management” > “Action / Bulk Action” > “Settings” > “Unset Homescreen Layout”
Then you can now manually remove apps from the devices.
- Go to “Settings” > “Home Screen Layout”
- Tap “+ Create New” or “+ Create New From App Label “
- Name the Layout
- Drag and drop the apps or grouping into folders
- Right clicking an app to remove
- Tap “Action” to add apps, web clips or page
- “Save” or “Save & Apply” to devices.
Yes. ESP support multiple blueprints
- Go to “Settings” > “Blueprint” > “＋ Create New”
- Provide Name and Select Target Devices, and set profiles, wallpaper, or install apps
- Tab “SAVE”
- Go to “Profile” > “Create New”
- Provide “Profile Name and tab “+ New Configuration”
- Select “Wi-Fi” from the dropdown
- Provide SSID and Password accordingly
- Tab “SAVE” button
* If you want to apply to a group of devices, please go to “Device” > “Device Management” > Select a Device Label > “Bulk Actions” > “Settings” > “Install Profiles” > Select device(s) and profile(s) > “Confirm”
- Please go to “Apple” > “APNS” > “APNS Info”
- Check if the current certificate is expired. If yes, please follow the instructions to update
- If no, please go to “Device” > “Device Management”
- Tap on the “Device Name” which is disconnected
- In Device Detail page, scroll down to “APNS Cert UID”
- If there is a notification of APNS is incorrect, please copy the last part of the UID (should be a mix of characters and numerics)
- Go to https://identity.apple.com/pushcert to find the certificate matching the last part of the device UID. Download that certificate and update to ESP again
After you have added the new devices’ Serial Numbers and assigned to ESP MDM in your ASM, you have to go to ESP Admin Console and perform the following tasks:
- “Apple” > “DEP” > “DEP Device” > “Actions” > “Update DEP” (This is to ask ASM DEP for most updated information)
- “Apple” > “DEP” > “DEP Device” > “Actions” > “Update Device Name or Actions” > “Update Device Name by Excel / CSV”
- On the new iPads, now open the iPad.
* For old ones, please REMOVE the previous management profile (if any) and Erase all contents and settings.
- Keep going until the ESP icon is installed on the iPad.
- Go to “Device” > “Device Management” > “Bulk Actions” > “Settings” > “Sync Device Name”
TeacherPad＋ 1.3.1
You can restrict users from logging into ZOOM to enter a meeting, and users can only enter meeting room with Meeting ID and passcode.
- Go to “App” > “App Management” > Search ZOOM Cloud Meetings
- “Action” > “Edit”
- Tap “App Config”, copy and paste the following scripts into the App Config box.
Reference：https://support.zoom.us/hc/en-us/articles/360022302612-Using-MDM-to-configure-Zoom-on-iOS
Tap “SAVE”. - Go to “Device” > “Device Management” > “Bulk Action” > “App” > “VPP Install” > ZOOM Cloud Meetings (*You have to re-install the app even if you have already installed before)
- When users enter “ZOOM” app in the iPad, “Sign In” still appears but login page will be inactive as below:
Credit to: CNEC TA TUNG SCHOOL Tang Sir
This is a 8-character strings uniquely identify each schedule created. This can be used to specify a schedule when reporting an issue.
ESP allows you to assign multiple VPP App licenses to multiple devices.
- “Apple” > “VPP” > “VPP License” > “Bulk Associate”
- Select “Devices”
- Select “VPP Apps” and tap “Confirm”
You can now set a schedule to enable and disable BlackScreen. Simply find the optional “Enable Black Screen” and “Disable Black Screen” in Extra Step in Schedule.
Application：You may consider using this feature as Sleeping mode at night time for BYOD students.
Note：This feature is similar to Single App Lock to ESP (Student), thus involve battery consumption. Recommend connecting to power source while in use of Blackscreen with Schedule.
After the iPad has enrolled MDM via DEP, you can mark it as Shared iPad in order to use Managed Apple ID.
- Check if the device has installed MDM/Remote Management via DEP
- “Apple” > “DEP” > “DEP Device”
- Set as Shared iPad
- “Actions” > “Set Shared iPad”
- “Actions” > “Set Shared iPad”
- Wipe Device and re-enroll the device as Shared iPad
- “Device” > “Device Management” > Select the device with Shared iPad label > “Advanced” > “Wipe Device”
- “Device” > “Device Management” > Select the device with Shared iPad label > “Advanced” > “Wipe Device”
