Slashdot Mirror

but we all know what will usually happen is that most students will spend their time chatting online, playing video games, etc.

Now only if there was some way to manage a device to not allow ad hoc app installs, or disable functionality you don't want the user to have...

Do you really think that people haven't thought of that years ago when they first started doing this?

apple has nothing like this, do they? normally, its an all or nothing wipe, just like outlook 'wants'.

Not Apple per se, but check out air-watch. We use it at work to put a wall around corporate data on our user's personal iOS devices.

Most of these can be solved if IT is willing to actively engage their users and try to help them. Here are a few examples of how we've addressed the issues you've pointed out. Nothing is perfect but we're trying to work with our users. Some people can be tough to work with, but if you genuinely want to help them I find most people receptive. Remember that a big part of our job as IT is customer service.

1. We use HotSpot printing from Ricoh. Just e-mail the document, walk to MFP and choose the file to release.

2. Specify a password for AirPlay on your AppleTV so other people can't send video

3. Check out Volume Purchasing and MDM platforms like Air-Watch or MobileIron.

4. You can not save your iTunes password on an iPad, it's not possible.

I've heard a lot of people say "Well why do you NEED an iPad". I honestly never understood the need for an iPad either, until I was given one. After spending some time with it, I think it's a great tool and almost indispensable now. What if we turned it around - tell me why users shouldn't be able to use their iOS devices, given that it's been proven that they can be deployed safely and effectively by using the appropriate procedures and management tools.

It's really not a big deal. Call Air-Watch or MobileIron or one of the 20 other companies that build comprehensive MDM platforms, get a quote, then put it in his mailbox with a note that says "need this to get your e-mail on your iPad".

There are several good tools for managing iOS and Android devices. Like Air-Watch and MobileIron.

Apple now supports Mobile Device Management platforms (Air-Watch is my favorite, MobileIron is also popular, but more expensive) that allow easy end-user provisioning, think of something along the lines of Enterprise Activation using Blackberry Enterprise Server. It also allows a significant amount of control over the device, like what apps can be installed, password requirements, remote lock/wipe, etc.

As far as bulk purchasing apps, Apple now has the "Volume Purchasing Program" that makes it easy to buy multiple copies of each App. Basically you go buy X copies of the app, you're given X download codes, you distribute those to your iOS device users and they use them to purchase the app.

Regarding encryption, iOS devices are also encrypted with 256bit AES hardware encryption (warning, that's a PDF - see page 3). To be honest with the tools available today it's not very difficult to manage Android and especially iOS devices.

Yes, you can use EAS or IMAP/CalDAV/CardDAV to get an iOS, Android or WM/WP device to work, but none of them are anywhere near as secure or manageable as BES. For the consumer or light business user, yes, EAS is fine, and geeks can suffer with IMAP+DAV and it's limitations, but as you increase either the number of users or the security and manageability requirements, they don't scale. Anyone who says otherwise has never actually used BES and has no idea what it does.

I disagree. I manage BES and ActiveSync in an enterprise environment. Some may like BES, but I don't see any real advantage in scalability in my environment. It is much easier to provision an Activesync device since I don't have to provide full access to the user's mailbox to a third party (BES service) user account, not to mention the security implications associated with a privileged account that can access everything in every BB users' mailboxes. If I need an audit trail on a user's mailbox, I would prefer all access to be done through the user's specific account. I find it just as simple to perform a remote wipe for a device through Exchange ActiveSync as I do with BES.

That said, as soon as someone duplicates what BES can do on iOS, Android and/or WP, BlackBerry is dead to the enterprise. It'll be Symbian all over again, and RIM will be left selling featurephones to teenagers, third-worlders, and third-world teenagers.

We're already there. MobileIron, Air-Watch, and Air Patrol are a few options out there. They cost money, but they have the functionality.

Additionally, the C-level administrators generally love the iPhone and iPad unless they have been long-term Blackberry users. Even those are frequently leaning toward the Apple devices. RIM has fallen behind in the usability department, and I am not sure they can catch up.