Can an iPad be enrolled remotely in Hexnode with supervision using ABM?Solved

Hi @ed_evans,

For iPads that require supervised-only restrictions, QR-based enrollment will not be suitable.

Policies such as device restrictions and app block/allow lists often require the iPad to be supervised. Supervision is available when the device is enrolled through Apple Business using Automated Device Enrollment, or when the device is manually added to Apple Business using Apple Configurator.

If the iPad is already listed in Apple Business, you can assign it to the Hexnode MDM server and apply the required enrollment profile. The end user would then need to erase or factory reset the iPad and complete the setup assistant. During setup, the device will enroll into Hexnode automatically and become supervised.

If the device is not in Apple Business, it cannot be remotely made supervised through Hexnode or by using only the enrollment QR code.

Best Regards,
Isabel Lora
Hexnode UEM

So if we skip Apple Configurator and just send the QR code to the user, the device can enroll, but the supervised restrictions won’t work?

Correct. QR enrollment can be used for enrolling a device, but it does not make the iPad supervised by itself.

If the policy depends on supervision, the iPad must be enrolled as a supervised device. For remote enrollment with supervision, the device needs to be present in Apple Business first. Once it is assigned to Hexnode from Apple Business, the user only has to erase the device and go through the setup process.

Without Apple Business or Apple Configurator-based supervision, supervised-only restrictions will not take effect.

Best Regards,
Isabel Lora
Hexnode UEM

Can a store-bought iPad be added to Apple Business remotely if we know the serial number? Or does someone need to handle the device?

No @rob_mitch. A device cannot usually be added to Apple Business remotely using only the serial number.

There are two common ways to get an iPad into Apple Business:

1. Purchase through Apple or an authorized reseller and have the reseller assign the device to your Apple Business account.
2. Manually add the device using Apple Configurator.

If the device was not added by the reseller at the time of purchase, Apple Configurator is the available manual method. This requires physical access to the iPad and cannot be completed entirely remotely from Hexnode.

Best Regards,
Isabel Lora
Hexnode UEM

One more thing — can the Apple Configurator method be done from a Windows device?

No @ed_evans. Apple Configurator is not available for Windows.

To manually add an iPad to Apple Business, you need to use Apple Configurator on a supported Apple device, such as a Mac or another supported Apple device. After the iPad is added to Apple Business, it can be assigned to Hexnode for Automated Device Enrollment.

Best Regards,
Isabel Lora
Hexnode UEM