Hi guys,


I have recently started a new role at work which involves setting up a new MDM system/process for our company owned iPhones. I am looking at using the Apple Device Enrollment Program to have devices pre-set up when they are purchased, and have the end users finish setting up the devices themselves.


We are currently using Good for Enterprise as a secure container for company email accounts, as well as a few mandated settings through MDM profiles, however the current implementation of this is quite inefficient. It requires IT to manually install the Good for Enterprise app on each individual phone that is ordered, which requires contact with the end user to get their personal Apple ID and password to download the app, as well as organising a time with the user to bring their current phone in for backup/restore.


So as you can see this is about as inefficient as it can get. One thing I’ve come up with so far (with the very limited resources I’ve been given) is to use the Apple configurator program on OSX to install the app on the devices without the user’s Apple ID, but this doesn’t solve the “having to physically handle every phone that is ordered in” problem we are currently having.


What I want to do is put the responsibility of data backup/restore back on the individual user, so IT don’t have to even touch the devices. Then give the user a device that has been pre-set up through the Apple Device Enrollment Program, so we can provision the MDM profiles and Good for Enterprise setup remotely.


Does anyone here have experience with anything like what I’m proposing? Is what I’ve outlined even a viable option? Any advice would be very much appreciated.