

Additionally, you will not be able to use iTunes, and even importing photos on other computers will be impossible.

WarningsĪs mentioned above, this setting will require your device to be supervised, which means it will need to be wiped.

Note that the screenshots in his detailed explanation, at the moment, are not up to date for iOS 9 and the latest Apple Configurator. This article, as well as some other research he has performed is a big reason why I've decided that this setting made sense for me, and why I believe more people should be using it. No more annoying prompts, no chance of trusting a computer by mistake, and even if your iPad was stolen unlocked from your hands, the thief would not be able to back it up to iTunes for further analysis.įor an excellent explanation of why this setting is valuable, see this article by iOS Forensics expert. Why would anyone want to trust another computer from their iOS device? Benefits While it's great that it doesn't trust computers by default, wouldn't it be nicer if it just did not ask? Then, if you mistakenly trust another computer, you'll need to delete all your network settings to delete that trust relationship. Your iOS device prompts to trust each computer you connect it to. Annoyances and Security Issues Problem 1 - Ability to Trust Other Computers

The settings that are not marked as "supervised only" can easily be used on existing devices. No matter what, make sure you have good backups, but understand that you may lose data. This is why I am posting this around the holidays, as it is an ideal guide for new devices, when you can benefit from a clean setup.Įx: Restoring from iTunes or iCloud after supervising a device will simply restore it to its prior state, without the configuration profile. This means that you should only perform this change on devices that you own, but it also means that you will need to wipe your device in the process, and that restoring of a prior-to-supervision backup to a supervised device actually undoes the process. These are is the settings to prevent a device from being paired to iTunes, as well as from trusting new enterprise application certificates. Two of these settings will require you to set your device to be a supervised device. Some of these will be even more valuable to those of you that travel often, and end up having to use Wi-Fi, as well as leaving iOS devices in less-than-ideal locations without keeping physical control over them.
#APPLE CONFIGURATOR DISABLE ACTIVATION LOCK HOW TO#
Then, we'll go over how to deploy these settings to iOS devices. However, some of the settings require making a device "supervised", which is typically not done on devices owned by employees.įirst, let's described some annoyances, and what the features to resolve them and improve security are. This guide is meant for personal devices, but most of the recommendations here should apply to enterprise as well. Since then, iOS 9 was released, bringing along many new features, including better support for Two-Factor Authentication, as iMessage and FaceTime now work without the need for app-specific passwords, and as your trusted devices now automatically get trusted when you authenticate using themĪs many people will be getting new iOS devices this holiday season, I decided to write about some simple, but very effective settings you can configure on iOS, to improve security significantly and reduce annoyances. Last updated at Thu, 14:14:30 GMT IntroductionĮarly this year, I posted an article on iOS Hardening that used animated GIFs to explain most of the recommended settings.
