iOS App deployment options; summarization

[MrP]

I've been looking into our options for deploying and updating iOS apps, as well as the OS. I have only been able to presume the following based on the research and testing I have done. I am looking for confirmation that what I have found is correct and/or options that I have missed.

Installation of apps at supervised device creation time can be done via Apple configurator.

From then on there are two options for deploying apps and updates.

1: Up to 5 sync stations where all devices share the same iTunes/Apple ID. No over the air updates can occur without sharing the Apple ID credentials. Over the air updates can be disabled by removing access to the app store app with a configuration profile/payload at which point users must physically plug in to a designated system to get any updates or new apps.

2: Apple ID's for each user. Over the air updates and app installs may occur, however users cannot be restricted from installing app store apps on their own. Also they cannot be kept from entering their own financial information into the apple ID subsequently putting personal purchases on the devices. In-app purchases can be restricted.

I'd like to allow users to install apps made available via self service, and OS updates, all over the air, but nothing else. It doesn't seem to be possible at this time.

Thanks for any feedback/clarification as to how 'things' work.

[MrP]

Anyone?

[cdenesha]

That sounds correct.

If I understand correctly, you need to keep personal stuff off the iPads. The only thought I have (besides wait and see what iOS 8 may bring) *may* work if the apps you install can be deleted without losing data. You can restrict the App Store like you mentioned, and purchase all apps with a single Apple ID. Set them up as In-House apps, and host them on a Web server. You can configure them to be 'prompted' to install which in this case does the install for you OTA. (I think these need to be Supervised devices for it to work.) When you deploy you have to launch one app once and enter the password, then all apps you push out with the same Apple ID will work. In the future when you wish to roll out an update you will need to take the old app out of scope (triggering an uninstall) and then putting the new app in scope. So this might not work for you.