Skip to main content
Question

Does a IOS restore kill the IOS Supervision profile

  • January 30, 2014
  • 13 replies
  • 37 views

Forum|alt.badge.img+7

Had the guy who provisions our devices call and say a user restored his phone andd it wiped all the profiles including the Supervision Profile . Is this the case, I thought a supervised device was just that a supervised device and even with a restore you could not remove supervision.

13 replies

Forum|alt.badge.img+15
  • Esteemed Contributor
  • January 30, 2014

Assuming supervision was applied using Apple Configurator, yes, it will be removed when a device is fully restored.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

Does this completely disable Configurator Supervision?


Forum|alt.badge.img+7
  • Contributor
  • January 30, 2014

When a device is wiped as you described, the supervision profile is taken off of the device as well. So in it's current state, it would be without that profile. You would have to plug that device back in to the configuration machine for it to get the profile again. Since the configuration machine already knows the device, it should just install the profile without wiping the device (At least that's what I have seen in practice).

What I tend to do is set up the restrictions area on the device so that they can't just wipe a device on their own. I let the MDM take care of the restrictions in there, but I turn it on just for that little extra bit of security.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

What restriction would that be, I don't see anything in relation to restoring.

Thanks.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

What restriction would that be, I don't see anything in relation to restoring.

Thanks.


Forum|alt.badge.img+7
  • Contributor
  • January 30, 2014

Sorry, I should have been a little more clear. When you turn on Restrictions in Settings -> General -> Restrictions:

That will automatically lock people out of being able to Erase All Contents and Settings from the Reset menu. When they hit that, they will be presented with a pin number that you would have set up in the restrictions area.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

Can that be done through Casper? Or does it have to be done at the device setup, also does this prevent being able to restore the device?


Forum|alt.badge.img+7
  • Contributor
  • January 30, 2014

Sadly, it's something that is put in manually at device setup.

When you say restoring...you mean through Configurator? Or through iTunes?


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

Itunes.


Forum|alt.badge.img+7
  • Contributor
  • January 30, 2014

It looks like a restore would be possible on iTunes from a user. That could be stopped though if you have it set up to not allow the iDevice to connect to machines other than the supervised device. Unless you want it to be able to be restored... Not sure what direction of thinking you are looking at there. :)


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

But if I select that they wont be able to sync music and such from their own machine?

Here is workflow
Configurator for supervision profile and intitial wireless enrollment
Casper Enrollment

Give to user:
Do not want user to be able to Restore from itunes but would like them to be able to sync with their itunes info.


Forum|alt.badge.img+7
  • Contributor
  • January 30, 2014

Correct, they wouldn't be able to sync the device then to iTunes.

What you are looking at is a balancing act. Not everything with the iOS devices is manageable right now. It's gotten better throughout the past couple years though, that's for sure.

Are these devices owned by the user or owned by the company? Either way, there should be some form of policy in place about not restoring the device, especially not without consulting the techs in place.


Forum|alt.badge.img+7
  • Author
  • Contributor
  • January 30, 2014

Owned by the company and there is a policy in place about restoring but you know users.