The Apple Device Enrollment Program (DEP) enables automated, over-the-air deployment and management of organisation-owned iOS devices. This article guides system administrators through configuring DEP baseline settings and enrollment options within the Mobile Guardian dashboard.
Prerequisites
- An active Mobile Guardian Administrator account.
- A valid Apple DEP / Automated Device Enrollment token already uploaded to your Mobile Guardian tenant.
Access DEP Settings
- Log in to the Mobile Guardian Dashboard.
- Select Settings from the main navigation panel.
- Click iOS MDM settings.
- Locate the Apple Device Enrollment Program (DEP) section.
Set Enrollment Rules & Policies
Configure the core management behaviours based on your organisation's deployment requirements:
| Setting | Recommended Value | Description |
| Allow Pairing | On | Enables devices to connect and pair with host computers or accessories. |
| Supervise | On | Grants deeper administrative control, policy enforcement, and feature restrictions. |
| Multi-User | Optional | Enable only if iOS/iPadOS devices will be shared by multiple users logging in with separate credentials. |
| Mandatory | On | Requires the user to apply the MDM management profile during initial setup (cannot be bypassed). |
| Allow Removal of MDM | Off | Prevents end-users or students from manually deleting the MDM profile from device settings. |
Configure Setup Assistant Screens
Streamline the user onboarding experience by suppressing unnecessary initial setup prompts:
- Scroll to the Setup Screens section within the DEP configuration menu.
- Select the checkbox next to every setup screen you wish to skip for the end-user (e.g., Location Services, Siri, Apple Pay, Appearance, Restore from Backup).
Save Configuration
- Review all selected checkboxes and policy toggles.
- Click Update Settings at the bottom of the page to apply the changes to all incoming DEP-enrolled devices.