Which enrollment type is required to supervise an iPhone?

Automated Device Enrollment (ADE), the successor to the Device Enrollment Program (DEP), is the primary method for deploying organization-owned Apple devices. A fundamental feature of ADE is that it automatically places devices into a supervised state during their initial setup. Supervision provides organizations with the highest level of configuration and management control. Crucially, ADE is the only enrollment method that allows the Mobile Device Management (MDM) profile to be made non-removable by the user, ensuring persistent management and making it the required method for the most robust form of supervision.

A. While this method for organization-owned devices does enable supervision, the management profile is always user-removable, offering a lesser degree of control than ADE.

B. This enrollment type is designed for user-owned (BYOD) devices and explicitly does not supervise the device, instead focusing on securely separating work and personal data.

C. This manual enrollment method, also known as Device Enrollment, does not enable supervision on its own. Supervision would require a separate, manual process using Apple Configurator.

1. Apple Platform Deployment (March 19

2024):

Section: Automated Device Enrollment and MDM

Page 31: "For organization-owned devices

using Automated Device Enrollment is the preferred method... This process provides the highest level of management

known as supervision... The MDM enrollment profile installed using Automated Device Enrollment can be made nonremovable by the user."

Section: Account Driven Device Enrollment

Page 36: "This enrollment method also supports supervision... The user can remove the enrollment profile at any time." This highlights the key difference in control level compared to ADE.

Section: User Enrollment and MDM

Page 34: "User Enrollment is designed for bring your own device (BYOD)... User Enrollment doesn’t allow the MDM solution to... use features like supervision."

Section: Device Enrollment and MDM

Page 33: "When a user enrolls their device using Device Enrollment

the device isn’t supervised."