Apple MDM

• h-mdm/h-mdm
• Flyve MDM
• The Best Mobile Device Management (MDM) Software
• multunus/onemdm-server
  • Ruby
• micromdm/micromdm
  • Mobile Device Management server
• Mobile Device Management (MDM) Protocol
• Wiki: Mobile device management
  • both company-owned and employee-owned (BYOD)
• BYOD: bring your own device
• What is Apple’s MDM Solution?
• Apple iOS Management
• Apple Device Management
• Device Management Commands and Queries

iOS

• 批量下发应用和策略
• 更加完善的策略管理
• 推送邮件和交换设置
• 应用黑白名单
• 网站黑白名单
• 发布企业应用 - 不需要上架 AppStore
• 推送网络设置和安全设置
• 远程投屏 - 需要 ITSM 工具
• 加密消息 和 VoIP 通话
• 配置设备为单应用模式 - Kiosk
• 在设备上发布内容和幻灯片
• 定时重启、锁定、解锁和动态应用策略
• 电池和数据流量使用的定期提醒
• 在不干涉用户隐私的情况下管理自带设备 - 自己提供设备在办公中使用 - 自带手机
• 案例
  • 锁定丢失手机并显示失主信息

macOS

• Enroll bulk devices and apply policies out of the box with Apple DEP
• Allow or restrict applications, set app preferences
• Whitelist websites and enforce content filters
• Apple curfews to limit device usage
• Restrict media and sharing
• Configure email and exchange settings
• Manage employee-owned devices without compromising on user privacy

LDAP

• Apple Device Management: LDAP
• Apple LDAP Schema
• Linux Address Book

dn:cn=Tom Thumb,ou=addressbook,dc=example,dc=com
cn: Tom Thumb
gn: Tom
sn: Thumb
o: Home
l: Brisbane
street: 12 Banana Ave
st: QLD
postalCode: 4100
pager: 5555 1111
homePhone: 5555 1234
telephoneNumber: 5555 1235
facsimileTelephoneNumber: 5555 1236
mobile: 0400 123 123
mail: [email protected]
objectClass: top
objectClass: inetOrgPerson