{"id":77342,"date":"2023-06-05T13:11:06","date_gmt":"2023-06-05T17:11:06","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=77342"},"modified":"2024-12-18T12:39:36","modified_gmt":"2024-12-18T17:39:36","slug":"understand-supervised-devices-and-policies","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies","title":{"rendered":"Understand Supervised Devices and Policies"},"content":{"rendered":"\n<p>The type of MDM enrollment you choose when enrolling an Apple device determines how that device will operate and which policies you can apply to the device. When you enroll a company-owned iOS, iPadOS, or macOS device via Apple\u2019s Automated Device Enrollment, the device automatically becomes supervised. Supervision gives you greater control over how your devices are configured and used. You can also create a supervised policy to enforce specific restrictions on using the devices (for example, users are not allowed to play multiplayer games in Game Center or they don\u2019t have access to the App Store).<\/p>\n\n\n\n<p>This article uses the term&nbsp;<em>iOS devices<\/em>&nbsp;to include iPhones and iPads. For more information on supported MDM enrollment methods, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/choose-an-mdm-enrollment-method\" target=\"_blank\" rel=\"noreferrer noopener\">Choose an MDM Enrollment Method<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Understanding Supervised Devices<\/h2>\n\n\n\n<p>These types of company-owned Apple devices can be supervised:<\/p>\n\n\n\n<ul>\n<li><strong>Company-owned macOS Devices<\/strong>\n<ul>\n<li><strong>Enrolled through Automated Device Enrollment with Zero-Touch Onboarding<\/strong>&nbsp;&#8211; This streamlined automatic enrollment creates a supervised, company-owned macOS device that is shipped directly to the user.<\/li>\n\n\n\n<li><strong>Enrolled through Device Enrollment<\/strong>&nbsp;&#8211; If a macOS device was not added to&nbsp;<a target=\"_blank\" href=\"https:\/\/business.apple.com\/\" rel=\"noreferrer noopener\">Apple Business Manager<\/a>&nbsp;(ABM) or&nbsp;<a target=\"_blank\" href=\"https:\/\/school.apple.com\/\" rel=\"noreferrer noopener\">Apple School Manager<\/a>&nbsp;(ASM), you can manually enroll a supervised device by downloading, distributing, and installing your organization\u2019s JumpCloud MDM enrollment profile.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<p>Very few MDM profiles require supervision on macOS, but Software Updates and Kernel Extensions both do. All JumpCloud MDM enrollments for macOS deliver supervision.&nbsp;Any of the macOS policies can be assigned to a supervised macOS device, resulting in a supervised policy.&nbsp;<\/p>\n\n\n\n<p>All macOS devices running macOS (Big Sur) or later automatically become supervised when enrolled in MDM via Device Enrollment.<\/p>\n\n\n\n<p>For instructions on enrolling company-owned macOS devices with Device Enrollment or Automated Device Enrollment, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/add-company-owned-apple-devices-to-mdm-with-device-enrollment\" target=\"_blank\" rel=\"noreferrer noopener\">Adding MacOS Devices to MDM<\/a>.<\/p>\n\n\n\n<ul>\n<li><strong>Company-owned iOS Devices<\/strong>\n<ul>\n<li><strong>Enrolled through Automated Device Enrollment with Zero-Touch Onboarding<\/strong>&nbsp;&#8211; This streamlined automatic enrollment creates a supervised, company-owned iOS device that is shipped directly to the user. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/add-company-owned-apple-devices-to-mdm-with-device-enrollment\" target=\"_blank\" rel=\"noreferrer noopener\">Adding iOS Devices to MDM<\/a>.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>If an IOS device was previously enrolled in MDM with Automated Device Enrollment and is then unenrolled in MDM, the device will remain Supervised. You do not need to wipe the iOS device before enrolling it with Device Enrollment. For more information on Device Enrollment, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/add-company-owned-apple-devices-to-mdm-with-device-enrollment#adding-ios-devices-to-mdm-\" target=\"_blank\" rel=\"noreferrer noopener\">Adding iOS Devices to MDM<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ul>\n<li><strong>Enrolled through Apple Configurator 2<\/strong>&nbsp;&#8211; You must have the iOS device in your physical possession and the device must be connected to a macOS device that is running Apple Configurator 2. If you have an Apple TV device, it must be on the same Wi-Fi network and in close proximity to the macOS device. During this process, the device is erased and all data is lost. See&nbsp;<a target=\"_blank\" href=\"https:\/\/support.apple.com\/guide\/apple-configurator-2\/prepare-an-iphone-ipad-or-apple-tv-manually-cad99bc2a859\/mac\" rel=\"noreferrer noopener\">Prepare an iPhone, iPad, or Apple TV Manually in Apple Configurator<\/a>.&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>If an iOS device does not have Supervision enabled at the time of enrollment, the device cannot have Supervision added to it after the fact.&nbsp;<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>If you want the iOS device to be supervised but you did not enroll it through Automated Device Enrollment or Apple Configurator 2, you must wipe the device. Simply restoring an iOS device backup from an unsupervised device to the same device does not result in a supervised device.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Understanding Supervised Policies<\/h2>\n\n\n\n<p>JumpCloud supports numerous policies for supervised devices. For instructions on creating and applying these policies, see\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/configure-settings-for-ios-policies\" target=\"_blank\" rel=\"noreferrer noopener\">Configuring Settings for iOS and iPadOS Devices<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The type of MDM enrollment you choose when enrolling an Apple device determines how that device will operate and which [&hellip;]<\/p>\n","protected":false},"author":204,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2925,2852,2995],"support_tag":[],"coauthors":[2838,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Understand Supervised Devices and Policies - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn about supervised devices and policies within MDM enrollment.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Understand Supervised Devices and Policies\" \/>\n<meta property=\"og:description\" content=\"Learn about supervised devices and policies within MDM enrollment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-12-18T17:39:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"jenniferklein, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies\",\"url\":\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies\",\"name\":\"Understand Supervised Devices and Policies - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:11:06+00:00\",\"dateModified\":\"2024-12-18T17:39:36+00:00\",\"description\":\"Learn about supervised devices and policies within MDM enrollment.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Understand Supervised Devices and Policies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Understand Supervised Devices and Policies - JumpCloud","description":"Learn about supervised devices and policies within MDM enrollment.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies","og_locale":"en_US","og_type":"article","og_title":"Understand Supervised Devices and Policies","og_description":"Learn about supervised devices and policies within MDM enrollment.","og_url":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies","og_site_name":"JumpCloud","article_modified_time":"2024-12-18T17:39:36+00:00","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes","Written by":"jenniferklein, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies","url":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies","name":"Understand Supervised Devices and Policies - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:11:06+00:00","dateModified":"2024-12-18T17:39:36+00:00","description":"Learn about supervised devices and policies within MDM enrollment.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/understand-supervised-devices-and-policies#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Understand Supervised Devices and Policies"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/77342"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/204"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/77342\/revisions"}],"predecessor-version":[{"id":118524,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/77342\/revisions\/118524"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=77342"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=77342"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=77342"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=77342"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}