![](https://help.apple.com/assets/6362E41904F57C36D47F1246/6362E41E04F57C36D47F1254/en_GB/312766e3df7f57c1f549da2dab216b36.png)
Consider best practices for different deployment scenarios
The process for deploying devices in an organisation depends primarily on whether that organisation or the user owns the devices and on how the devices are enrolled in a mobile device management (MDM) solution.
After understanding the basic steps for a device deployment, an organisation’s IT team can explore Apple’s deployment and management capabilities in detail. If you’re a key stakeholder in your organisation, you’ll want to review the deployment scenarios detailed below.
Watch the video Prepare Devices for Learners for an overview of essential tasks and resources needed to set up and manage Apple devices. Topics include selecting a deployment model, enrolling devices in mobile device management and deploying core apps to students.
Plan for teaching and learning from home
With many students learning from home, there’s an opportunity to rethink the types of connectivity and access to learning tools you’re providing to the entire student population. When all students are physically at school, on-campus Wi-Fi and inline content filtering work well. But when that isn’t possible, consider distributing mobile data–enabled devices for remote learning to help ensure that parts of the student population aren’t excluded from learning — for example, students without access to a device or without broadband internet at home. One solution is a mobile data–enabled iPad. It combines powerful tools and apps for creative learning experiences with built-in gigabit-class LTE and Personal Hotspot functionality.
For remote learning deployment, follow these best practices:
Use embedded SIMs (eSIM) for scalability and tamper resistance.
Have a data plan that doesn’t impose data usage limits or throttling.
Make sure areas your students live or learn in have network coverage and adequate capacity.
Deploy a content filtering solution that minimises latency and respects user privacy, like the Cisco Security Connector on the App Store. For more information, see Take advantage of content filtering.
For more information on remote learning with iPad, see Deploy iPad with mobile data connections.
Purchase and provide the devices
In this deployment, known as the organisation-owned model, your organisation purchases devices from Apple or a participating Apple Authorised Reseller or network provider. You can then deploy devices in two ways:
One-to-one deployment: Provide a device to each user.
Shared-use deployment: Rotate a device between users.
For more information about the two MDM enrolment processes for the organisation-owned model, see Device enrolment configuration options.
In a typical one-to-one deployment, your organisation purchases devices for all eligible managers, staff, teachers and students. You might purchase for a particular year group, a department, an entire education authority, or a university. Successful one-to-one deployments work best when they have:
Users configuring their own devices
Managed Apple IDs
A single app or a small set of core apps initially deployed automatically to devices
A self-service app deployment model for additional apps
Settings and restrictions that help focus students and prevent misconfiguration. For example, marking critical apps as non-removable.
Managed Lost Mode to locate misplaced devices, and Activation Lock for theft deterrence
Simple self-help support resources for users
In a shared-use deployment, devices are shared between students, sometimes during a class and sometimes from class to class. Shared iPad enables schools to share devices between students, while keeping student data separated and still providing a personalised experience. Students can access their personal content such as homework, apps and assignments using a password or easy-to-remember four-digit PIN.
Shared iPad deployments work best when they have:
Users returned to the same device as much as possible to provide a fast sign-in experience. Using the Classroom app, teachers can easily assign devices to students so they can return to their last-used device. For more information, see What is Classroom? in the Classroom User Guide.
Storage allocation planned to balance sign-in speed and available work space. For more information, see user space considerations in Shared iPad.
All apps deployed to all devices.
The “Show app” restriction used on a per-user group basis to tailor the learning environment.
Note: Shared iPad requires Managed Apple IDs.
Use a mix of deployments
Your organisation may use a mix of deployments. Examples are:
A middle school might deploy a one-to-one deployment for all year groups.
A large education authority might first deploy a one-to-one deployment at a single school and then roll out one-to-one deployments for the entire area.
A primary school might deploy a one-to-one deployment for years 3 to 6, and a shared-use deployment up to year 2.
In higher education, a department might deploy a one-to-one deployment.
Have users purchase and set up their devices
In this user-owned model, users purchase, set up and configure devices. These types of deployments are commonly referred to as BYOD, or bring your own device deployments. To use organisational services (such as Wi-Fi, mail and calendars) or to configure the device for specific education or business requirements, users typically enrol their devices in an organisation’s MDM solution. With the user-owned model, you can configure devices through User Enrolment.
User Enrolment is integrated with Managed Apple IDs to establish a user identity on the device. A Managed Apple ID is part of the User Enrolment profile, and the user must successfully authenticate for enrolment to be completed. The Managed Apple ID can be used alongside the personal Apple ID that the user has already signed in with, and the two don’t interact with each other.