Restricted Profile

What to expect after you install a Restricted profile 

Your device will:

  • Require a passcode to unlock it because you work with Restricted Data.
  • Time out after a period of inactivity and require a passcode to unlock it. You can change your preferences in Settings for a period up to five minutes.
  • Download your emails, contacts, and calendar appointments during the first few minutes after installation (if you chose Managed Mail).
  • Check periodically to make sure it hasn't been jailbroken.
  • Perform otherwise as it did before you installed the MDM.

How to install a Restricted profile on your mobile device

You can download PowerPoint slides from a tech briefing in 2011*, watch a tech briefing on the subject of MDM, or follow the written instructions, below.

On the Mobile Device Management installer page, you'll answer a series of questions.

* Some portions of the interface may have changed after these tech briefings were presented.


Brief introduction to how MDM can help you

Start

  1. Start on the "Mobile Device Management (MDM) Service" page.
  2. Tap the Benefits of MDM button to review the list of  features that will install on your device.
  3. Tap Privacy Information to read about how Stanford University respects your privacy.
  4. Tap Continue.
This takes you to the "Let's get started" page.

Will this device use restricted data?

Restricted data question

Before you answer the question "Will you use this device to access Restricted data?", tap the Learn more about the Stanford Data classifications button to review the list of security categories.

  • Tap Yes.

A "yes" response to this question brings you to the email and calendar configuration page.

If you work with Restricted Data, you should always tap "Yes."

 Would you like your email and calendar configured?

 

Email and calendar

You can also install a managed Stanford Email and Calendar account, which:

  • Allows you to wipe this account remotely if your device gets lost without removing all your personal apps and data.
  • Easily updates if Stanford makes changes to email servers and other settings.

    Choose one of these email options:
  • Yes - Configure Stanford email and calendar configures your account and gives you the ability to wipe it remotely if you lose your device. You should remove any existing Stanford accounts from your device if you choose to configure your email with MDM*.
  • No - don't configure email and calendar does not install a managed account on your device. Your previously installed accounts will continue to work, but you won't be able to selectively wipe Stanford data remotely.

*If your group runs its own Exchange server, don't remove your existing email account.

what to expect during the installation process

What to expect: installation

This page describes the events during the installation process, which includes some alert messages. These iOS alerts are normal.

  1. Read the instructions on this page before you install the configuration profile.
  2. Tap Begin Now at the bottom of the page when you're ready

 The install profile process begins with this image

Begin the installation

This profile image will come up on your screen. It enrolls you in the MDM program. You need to install it to enable your personal profiles.

  1. Tap More Details to learn more about this profile before you proceed.
  2. Tap Install to proceed. 

Several screens appear during the installation process to indicate when the installer is enrolling, installing, or generating a key. This is normal.


You will see this warning message during the process

 

Warning dialogs

"This Profile will change settings..."

This warning alerts you that some of your settings will change on the device to accommodate the configuration profiles. These include the passcode requirements and other security settings.

Tap Install Now.

 

This warning message is standard legal information from Apple

 


"Mobile Device Management...administrator"

This message is standard legal information from Apple and it's generated automatically. You might wonder what it means for you.

Stanford University respects your privacy and cannot access your call history, your voicemail, or your SMS messages. For a complete copy of Stanford's privacy policy, download the PDF. To read about privacy in the context of the MDM program, see the Privacy Information service page.

When you're ready, tap Install.

This indicates your progress. Your certificate is enrolling.

 

Installation continues

The configuration profile begins to install your specific settings (including email, if you chose it) and several more screens appear during this process. You may be asked at this point to enter a device passcode. 

You're almost finished.

 When the installation ends, you will see the Profile Installed screen

 

Profile Installed

When your profile finishes installing, the Profile Installed dialog appears. Tap Done. This returns you to the Safari browser, where you see the "Enrollment in progress" page with further instructions.
enrollment in progress message

Completing your enrollment

After your profile installs, this "Enrollment in progress" page appears, which notifies you of the new MDM icon on your Home screen and what to expect while your profiles finish installing on your device.

Scroll down the page after you read this information.

This pop up occurs at the end of your installation process. Tap

 

Notification

You also receive a pop-up message that notifies you that it's installing the MDM app on your device and that you will not be charged. Tap Install.

 

notice that you may be prompted for more information

 

What to do next:

After you scroll down the page and read the instructions, Press the Home button on your device. (You can review the information on this page again at any time on the web.) 

Press the Home button and tap Settings to set your device passcode, email password, and time allotments for the security features.


 

 

 

Tap the MDM app on the Home screen

Launch the Stanford Mobile Management app

Tap the Stanford Mobile Management app on your Home screen to open the Device Manager.

an alert asks you if you're sure you want to open the app

 

 

 Tap Continue when you see the alert that says "Are You Sure You Want to Open the Application "Stanford MDM" from the Developer 'iPhone Distribution: Stanford University, IT Services?1"

MDM application screen

 

Go to your Manage Device page

Tap Manage your device when you see this screen. This activates your Stanford Mobile Management app and brings you to the Device Manager, where you can view your device status.

MDM home page

 

Tap the Security button

If you have more than one device registered with Stanford MDM, tap the button for the correct device before you enter the Manage Device dashboard.

In the next screen, tap the Security button to enter the Security dashboard.

 

 

This is what the Security tab looks like on an iPad

 

iPad view

The iPad presents a different view of the Security  button and dashboard. The Security tab is in the left-hand column of your Manage Device window. Tap it to enter the Security Dashboard.

security information

 

The Security dashboard

The security page explains what you should see in the dashboard: a green checkmark by each item in the list. You need to have a green checkmark in each category to work with Restricted Data.

Review the security status of your device

Viewing and updating your Security status

Tap on each icon next to each item to learn more about what it means and how to resolve an issue if you don't see a green checkmark next to it. You can also view this information on the Security Issues service page.

  • A green checkmark means that your device meets the security guidelines for working with Restricted Data.
  • A yellow alert means that your device's status is unknown.
  • A red alert means that your device does not meet security guidelines and action is required.

If you need to update the status of any items on this list, tap the Update Device Information Now button and refresh your browser window.

When you're finished, press the Home button on your device to view the device settings.

 
 

Your installed profiles might be similar to thes

Review your profiles

Tap Settings > General to see the list of MDM profiles on your device. Learn more about them by pressing the right arrow. Your profiles might include:

  • Your enrollment profile. If you need to delete the MDM profiles, this profile removes all of them.

  • MDM settings

  • VPN

  • Mail (optional)
Be sure to bookmark the URL of the Manage Device (self-service) page on your desktop or laptop computer.