iOS Supervised Mode

Related Video: Supervised Mode: iOS

Supervised mode gives a device administrator the highest level of control on an iOS device. The function is typically used in enterprise environments where devices are owned by the company. In KACE® Cloud MDM, a supervised device is automatically enrolled as a company-owned device.

Set Up Supervised Mode

  1. Download or open Apple Configurator 2 .
  2. Attach the device to your computer using a USB cable.
  3. In the All Devices view, select the device.
  4. Click Prepare.
  5. Follow all steps in the wizard to activate supervised mode.
  6. Once complete, the device user will see a "supervised and managed by [company name]" message under their Settings.

Note: For detailed instructions and troubleshooting when activating supervised mode, see Apple Configurator 2 Help .

Manage Supervised Mode

After activating supervised mode using Apple Configurator 2, the iOS device can be managed using KACE Cloud MDM.

  1. Go to Devices in top navigation.
  2. Select a device or devices.
  3. In the right panel, click the iOS dropdown to see all available actions for managing a supervised device.

In the devices section, a supervised device is identifiable by the device icon next to the iOS icon.

Additional restrictions that can be applied to supervised devices are located under Restriction Sets in the device detail panel.

Additional Functionality

Check for OS updates

Checking for OS updates will call up the most recent set of updates that may not already be visible next to the Operating System entry in the General section.

Update OS

The update OS command will force an install of the most recent OS update to the selected device. Note that device users will also be prompted by Apple for OS updates.

Enable Lost Mode

The Enable Lost Mode command will prevent a selected device from being unlocked by a third party. A phone number, footnote, and/or message may be displayed on the lock screen for the benefit of the device user—for example, "Please bring this device to an administrator to unlock." A device admin can then request the device location or play a lost mode sound. Lost mode can also be disabled.

  1. Go to Devices in top navigation.
  2. Select a device or devices.
  3. In the right panel, click the iOS dropdown to see all actions.
  4. Choose Enable Lost Mode.
  5. Once lost mode has been enabled, the compass icon will be present next to the device name, as highlighted below.

Caution: In lost mode, the device will automatically set itself to low-power mode. The device will periodically turn off and on. This status may cause a device to not initially respond to commands, but when the phone returns to the on setting, the command will be run.

Disable Lost Mode

Disabling Lost Mode requires the passcode that was already set on the device before it was put into Lost Mode.

Locate Device

Once a device is in Lost Mode, a device admin can send a Locate Device command. The device is notified that the location is being tracked and the location information is returned from the device, if the device is responding. A device admin can then view the coordinates and movements, including viewing the location on a map.

Play Lost Mode Sound

Once a device is in Lost Mode, a device admin can play a lost mode sound to help the device user locate the device. Note that even if the media sound is turned off on the device, the lost mode sound will play.

Clear User Restrictions

The clear user restrictions command will remove the restrictions passcode from the selected device and reset all user-defined restrictions to default settings.

Remove Activation Lock

Please see our section on Activation Lock functionality.

Wakeup Device

The wakeup device command lets an admin prompt an iOS device to check in to the KACE Cloud MDM service to retrieve queued commands.