Lower School iPads

xroadsipads@crossroadsacademy.org is the "owner" of all the LS iPads.

This describes the scorched-earth approach we took in summer 2017 re: the lower school (Klee) iPads.

What we did FIRST:

- turned off Find my iPad (Cindy told us her blah@gmail.com AppleID password)

- factory reset (erase all content and settings)

- plugged into Mac, open iTunes, "set up as new iPad"

- update to latest iOS

Then, we configured the "master" iPad with various sane settings -- restrictions for adult content, not letting them change certain settings without the restrictions passcode (1492), suppressed syncing to iCloud so the single xroadsipads "person" doesn't get a ton of photo spam, turned off notifications to reduce distraction factor, suppressed Siri and Facetime, made sure Find my iPad and Location Services are ON, DO allow Automatic Downloads for iTunes and App Store (so we can push apps from Meraki), added the "xroadsipads" email account so they can send attachments and have autofill help them spell teacher names, etc.

VOLUME PURCHASE PROGRAM (VPP) AND APP PURCHASING:

USE THIS METHOD EVEN FOR FREE APPS!

appledep@ can log in to the VPP and actually make purchases using the school credit card. I don't know what this means his "role" is (maybe facilitator? we know he's not manager and we can't get in to the manager account because Wildbranch owns it.) So we bought 20 copies of Stack the States in the VPP store. We chose the "managed distribution" option instead of codes.

Then we logged in to Meraki and chose the Crossroads Academy Student iPads network and went to Systems Manager -> VPP and mashed Force Sync Now and waited a minute for it to refresh, and the 20 licenses appeared! Holy smokes!

If you look under Organization -> MDM, there's a section where the appledep account is defined. The "token" expired February 2019, so in the VPP go to Account Summary -> Download Token, then Meraki Organization -> MDM, scrolled down to "Apple VPP Accounts" and clicked on the account and dragged new token into box and saved, then re-synced AND refreshed page and the new app appeared.

THEN we went to Systems Manager -> VPP -> Users and added xroadsipads@crossroadsacademy.org and sent an invite. <- one-time step

Then granted license:

Then opened Mail.app on LS iPad 1 and clicked Accept link, then agreed to terms and it said "This organization can now assign apps and books to you." <- one-time step

THEN went to Systems Manager -> Apps and added Stack the States and changed the Purchase Method to "VPP user assignment" and set the scope to "with ALL of the following tags" and picked "refreshed17" and "lowerschool" and checked boxes for "auto-install/auto-uninstall" and "Remove with MDM"

Then checked box for Stack the States and selected "push to all" and waited, and...IT WORKED! (still prompted on iPad to accept the install, but did NOT ask for password, and said "you will not be charged")

VPP purchase history attached below.

PROCESSING THE REST OF THE IPADS:

1. Open iTunes on the mini server. Connect the next iPad and click "restore backup" and choose "LS iPad 1" It should autofill the password but if not, it's almost certainly the same one as for the owner AppleID -- see the spreadsheet for a reminder.) Leave it connected until it reappears in iTunes and finishes syncing.

2. When it finishes the restore and reboots, enter password into the MAIN background prompt (dismiss any popups or you'll just have to do it multiple times) and accept whatever agreement, turn off Siri, etc. It will begin loading/installing the apps from the master "image."

3. RENAME IT to LS iPad 0X (Settings -> General -> About).

4. Open Safari, url is already in history -- just reload. If not, go to m.meraki.com and enter

041-054-4430 <- this is for the Student iPads network

Accept prompts to install profile, trust, etc.

5. On a computer, log in to Meraki Systems Manager and go to the "Crossroads Academy Student iPads" network -> Client monitor, find the new one, tag it with "lowerschool" (probably already has this tag from before) and "refreshed17" (tells us it's been redone this summer)

6. Still in Meraki, resend apps. It will automatically begin receiving our VPP paid apps. Tap "install" as needed. <- this may just happen on its own, actually.

7. UPDATE INVENTORY + PRINT STICKER(S)

Later, if we want to add an app, use Meraki to push it down.