How and which applications come under MDM configuration profile

1
votes

After MDM enrollment mdm configuration profile gets installed in device but what is the parameter which decide about which applications will come under this mdm configuration profile.To be more precise, suppose mdm configuration profile got installed on my device(we can check in General>Device management) and now whatever application i installed through that will come under that configuration profile in the Apps section.So my question is all the applications which we install will not come under that profile.So i want to know what is the parameter which decide which application will be under mdm profile and which app will be out of it.

Second Question:

I tried one test case which is showing some other response, i will explain it step by step:

  1. I installed MDM configuration profile on my device, which prompted me to install an application and i installed it successfully.The application has gone inside the configuration profile in Apps section.

  2. Then i manually deleted the application.

  3. Then i installed the same application(with same distribution certificate) through my mac and it again gone inside the same configuration profile inside Apps section.

If you are saying that only the applications which are installed through Install app command will be managed then how the application which i installed through Mac system(same application) directly is going into that configuration profile? I think there is some link of that provisioning profile with the configuration profile.

Thanks for your answers in advance(-:

1
iosmdm

1 Answers

1
votes

It is neither. Once the device management profile gives is installed on the device, the MDM server has permission to install and remove managed apps.

Once the profile is installed the MDM is authorised to send management commands to the device. One of the commands it can send is the command to install/manage an app. managed application commands

If the MDM attempts to install an app that is already installed then the user will be prompted to allow that app to become managed by the MDM if the ChangeManagementState property of the request is set to managed.

Although the list of managed apps appears in settings under the profile, the apps are not directly part of the profile that is delivered to the device, they are simply associated with the profile once the MDM issues the install managed app command.