Keine Bearbeitungszusammenfassung |
Maltea (Diskussion | Beiträge) Keine Bearbeitungszusammenfassung |
||
| (Eine dazwischenliegende Version von einem anderen Benutzer wird nicht angezeigt) | |||
| Zeile 633: | Zeile 633: | ||
<br> | <br> | ||
; b) Teilverwaltung<nowiki>:</nowiki> Geräte sind Eigentum des Unternehmens, private Apps und Daten sind erlaubt (COPE - Company owned, personal enabled) | ; b) Teilverwaltung<nowiki>:</nowiki> Geräte sind Eigentum des Unternehmens, private Apps und Daten sind erlaubt (COPE - Company owned, personal enabled) | ||
* Es gilt das Gleiche wie unter a) mit dem Unterschied, dass zusätzlich die Einwilligung des Endgerätenutzers auf dem Endgerät erforderlich ist, bevor | * Es gilt das Gleiche wie unter a) mit dem Unterschied, dass zusätzlich die Einwilligung des Endgerätenutzers auf dem Endgerät erforderlich ist, bevor die Ortung über das Portal aktiviert werden kann. | ||
<br> | <br> | ||
; c) Private Endgeräte mit Apps und Daten für Arbeitszwecke (BYOD - Bring your own device) | ; c) Private Endgeräte mit Apps und Daten für Arbeitszwecke (BYOD - Bring your own device) | ||
| Zeile 642: | Zeile 642: | ||
; a) Full Management<nowiki>:</nowiki> Devices are the property of the company, private apps and data are prohibited (COBO - company owned, business only) | ; a) Full Management<nowiki>:</nowiki> Devices are the property of the company, private apps and data are prohibited (COBO - company owned, business only) | ||
* Mobile devices can generally, without exception, be located only if location tracking is activated by | * Mobile devices can generally, without exception, be located only if location tracking is activated by an administrator. Upon activation, only the specific location at the time of tracking is logged. | ||
* For each tracking instance, users automatically and immediately receive a notification on the affected device, ensuring that covert tracking is not possible. | * For each tracking instance, users automatically and immediately receive a notification on the affected device, ensuring that covert tracking is not possible. | ||
<br> | <br> | ||
; b) Partial Management<nowiki>:</nowiki> Devices are the property of the company, private apps and data are permitted (COPE - company owned, personal enabled) | ; b) Partial Management<nowiki>:</nowiki> Devices are the property of the company, private apps and data are permitted (COPE - company owned, personal enabled) | ||
* The same principles as under a) apply, with the exception that the user's consent on the device is additionally required before location tracking can be activated | * The same principles as under a) apply, with the exception that the user's consent on the end device is additionally required before location tracking can be activated via ther portal. | ||
; | ; c) Private end devices with apps and data for work purposes (BYOD - Bring your own device) | ||
Private end devices with apps and data for work purposes (BYOD - Bring your own device) | |||
* Tracking is not possible for private devices that are used for business purposes. | * Tracking is not possible for private devices that are used for business purposes. | ||
<br> | <br> | ||
In-depth details on Lost Mode: [{{#var:host}}MDM/Geraete#Operationen/Operation Section in the Device Wiki Article] | In-depth details on Lost Mode: [{{#var:host}}MDM/Geraete#Operationen/Operation Section in the Device Wiki Article] }} | ||
<!--{{var | Systemapps COBO iOS-Geräten | |||
| Systemapps auf vollverwalteten (COBO) iOS-Geräten | |||
| Systemapps on fully managed (COBO) IOS Devices }} | |||
{{var | Systemapps COBO iOS-Geräten--Frage | |||
| Kann man Systemapps auf vollverwalteten (COBO) iOS-Geräten über das MDM verwalten? | |||
| Can systemapps be managed on fully managed (COBO) IOS devices via MDM? }} | |||
{{var | 1=Systemapps COBO iOS-Geräten--Antwort | |||
| 2=* Systemapps gelten auf iOS immer als unverwaltet, weil Apple Systemapps grundsätzlich außerhalb des MDM-Frameworks hält und diese daher auch auf vollständig betreuten (COBO) Geräten nicht in einen verwalteten Status versetzt werden können | |||
* Daher: Nein, laut Apple sind native Systemapps immer unverwaltet, weshalb Systemapps sich auch auf vollverwalteten (COBO) Geräten nicht in einen verwalteten Modus überführen lassen. | |||
* [https://support.apple.com/guide/deployment/review-mdm-restrictions-dep739685973/web#:~:text=Configurator%20for%20Mac.-,Unmanaged%20sources%20are%20apps%20installed%20from%20the%20App%20Store%20(including%20native%20system%20apps)%20and%20accounts%20set%20up%20manually%20on%20the%20device.,-Default%20is%20off Überprüfen von MDM-Einschränkungen für Apple-Geräte] | |||
| 3=Systemapps on IOS are always considered unmanaged because Apple keeps systemapps outside of the MDM framework. As a result, they cannot be set to a managed state, even on fully managed (COBO) devices. | |||
* Therfore: No, according to Apple, native system apps are always unmanaged, meaning system apps cannot be transitioned to a managed mode on fully managed (COBO) devices. | |||
* [https://support.apple.com/guide/deployment/review-mdm-restrictions-dep739685973/web#:~:text=Configurator%20for%20Mac.-,Unmanaged%20sources%20are%20apps%20installed%20from%20the%20App%20Store%20(including%20native%20system%20apps)%20and%20accounts%20set%20up%20manually%20on%20the%20device.,-Default%20is%20off Checking MDM Restrictions for Apple Devices ] }}--> | |||
{{var | Systemapps COBO iOS-Geräten | |||
| Systemapps auf iOS-Geräten mit Apple DEP | |||
| System apps on IOS devices with apple DEP }} | |||
{{var | Systemapps COBO iOS-Geräten--Frage | |||
| Kann man Systemapps auf iOS-Geräten mit Apple DEP über das MDM verwalten? | |||
| Can system apps on IOS devices with Apple DEP be managed with MDM? }} | |||
{{var | 1=Systemapps COBO iOS-Geräten--Antwort | |||
| 2=* Nein, native Systemapps sind nach Apple immer unverwaltet | |||
* iOS- / iPad-Geräte mit Apple DEP, die im MDM mit dem Betriebsmudos COBO eingebunden sind, können Systemapps daher nicht in einen verwalteten Modus überführt werden | |||
*[https://support.apple.com/guide/deployment/review-mdm-restrictions-dep739685973/web#:~:text=Configurator%20for%20Mac.-,Unmanaged%20sources%20are%20apps%20installed%20from%20the%20App%20Store%20(including%20native%20system%20apps)%20and%20accounts%20set%20up%20manually%20on%20the%20device.,-Default%20is%20off Überprüfen von MDM-Einschränkungen für Apple-Geräte] | |||
| 3= No, native system apps are always unmanaged according to Apple | |||
* iOS / iPad devices with Apple DEP, enrolled in MDM with COBO mode, cannot have system apps converted into a managed mode | |||
* [https://support.apple.com/guide/deployment/review-mdm-restrictions-dep739685973/web#:~:text=Configurator%20for%20Mac.-,Unmanaged%20sources%20are%20apps%20installed%20from%20the%20App%20Store%20(including%20native%20system%20apps)%20and%20accounts%20set%20up%20manually%20on%20the%20device.,-Default%20is%20off Check MDM restrictions for Apple devices] }} | |||
---- | ---- | ||
{{var | | {{var | | ||
MS/FAQ.lang: Unterschied zwischen den Versionen
Aus Securepoint Wiki