What is DEP and What Does It Really Do? (Update: Apple now calls DEP, Automated Enrollment, ABM)

In this video, we talk about what Apples DEP (Device Enrollment Program) is, or now known as ABM, and what it does. We go over how to get started with DEP, signing up for the program, and some of the most popular supervised DEP features and restrictions that can be accessed from your MDM.
business.apple.com/
iOS Security Guide: www.apple.com/business/site/d...
You can also learn more from the two blogs I wrote on the subject as well:
What does DEP really do?
/ what-does-dep-really-d...
What are the new enterprise features IT needs to know about in iOS 11?
/ what-new-enterprise-fe...
LinkedIn:
Michael Goad: / michaelgoad
Twitter: @heyitsgoad
I am a healthcare mobility solution architect at CDW. If you have any questions or would like to talk about mobility please reach out!

[@petelongrs]

1.58 = The reason why we need to use DEP/ABM at all. Thank you!

[@5MinuteMobility]

Thanks for watching!

[@jimmagnusson2429]

Thanks for this quick and easy to understand content to share with others. Great Job !!

[@5MinuteMobility]

Thanks! Currently scripting some more content on things like what automated mdm enrollment looks like with DEP devices and controlling activation lock. Stay tuned and appreciate the feedback!!

[@martinyable]

Thank you !!

[@5MinuteMobility]

My pleasure and thanks for watching!

[@osks]

Excellent - well done!

[@5MinuteMobility]

Many thanks!

[@kb8570]

Hi, Can you please explain what is the difference between Apple Profile Manager and Apple Configurator? Do these two works with Apple DEP?

[@5MinuteMobility]

Profile Manager and Configurator are actually the same product. Profile Manager is a feature within Configurator where you can build profiles for Apple Devices, like WIFI and setting restrictions, and then Configurator can be used to manually provision those profiles to those devices. Configurator can also be used to manually enroll devices into ABM

[@kb8570]

@@5MinuteMobility Thank you for your help.

[@hippo-potamus]

Can the administrator of a DEP device access the device remotely and view/add/delete/copy etc files? I purchased a used macbook pro off ebay computer seller and it has a popup asking for me to enroll. I don't want to start saving files if there is a chance someone has remote access to them. Thanks

[@5MinuteMobility]

DEP only won't give you access to those kind of features, but if the admin also enrolled the device into MDM, then yes, an admin would be able to manage functions and features on that device. In your case, you purchased a mac that is enrolled into an organizations DEP and that is not a good thing. There is no way to remove that from a company's DEP unless the company manually removes it, Apple won't even do it for you. You are getting that pop up because it is enrolled into that company's DEP and most likely is also trying to enroll into that company's MDM, which would give them the capability to see things like apps, and ability to remove functions of the device or even see your activity depending on what the MDM installed

[@smnhdy]

DEP is not ABM....
DEP is the enrolment mechanism. ABM is the place you go to, yes, configure and manage the EMM server tokens your DEP devices point to, but you also manage your VPP applications, licences, procurement etc, and also manage the DEP devices themselves with a view to ownership, and the suppliers of DEP devices to allow them to provisioning devices to your portal.

[@5MinuteMobility]

Thanks for adding additional clarification. Talking to customers I still have found confusion there , especially if they were using the legacy portal so I appreciate the additional clarity and input.

[@kb8570]

Hi, Can you please explain what is the difference between Apple Profile Manager and Apple Configurator? Do these two works with Apple DEP?