Require to route all traffic via my own network while users are off wifi - best way i can do this just now is via Always on VPN.

It would be good to see if a device has an update from the Devices Screen, rather than just when you go in to the device settings. This would be useful for non-DEP devices that are unable to have the auto update function enabled due to them not being enrolled in DEP.

Would be goot to be able to push the update from that screen also.

Allow adjustable time for Two Factor Authentication - the default should require the pin to be required at each log in. The current setting is several days between prompts. Alternately this should at least be configurable to per logon, 1 hour, or 1 day etc as this is a security risk two factor authentication is support to mitigate.

It would be great if the password of the local administrator account created during the DEP enrolment was unique to that device.

The password could be shown in the device information together with the EFI password and FileVault recovery key.

We are running iPads as Kiosks and only want to push updates to them overnight when users will not be effected, Ideally this would include all config changes but most importantly these:

• Non VPP App Updates (enterprise apps)


• iOS updates


• Other Configuration changes

In SimpleMDM you can revoke vpp licenses. It would be great if this is possible via SimpleMDM API.

I propose adding the ability to specify MDM Payload access to devices based on facts of the device. For instance, there is a bug in 10.13.4 that doesn't respect a KEXT profile that was installed prior to 10.13. Having the ability to say only 10.13 machines can get the KEXT payload would fix this issue.

It would be awesome to have a comment field so we could note which app or developer each team ID or bundle ID is for.

As of iOS 11 you can now share your network settings. This poses a problem for devices that aren't company owned. Users can now share the password with other Apple devices that are close by. We would like to prevent MDM devices from sharing passwords with any other device.

The plan is, we'll be populating an asset management system with our MDM data... and the team setting it up would like this data tracked too

Not sure if the MDM API allows for gathering this information - but it does - this would be really helpful for us.

Thanks

Steve

When working with a device group, if I take an action on a device or group of devices, the page reloads and resets my view back to "All Device Groups." It would be MUCH more useful if taking an action kept me at the current device group view instead of resetting to the default.

Force user's device to enroll when an Office 365 email account is added. I see in my 365 portal that Microsoft is supporting external MDM providers already Airwatch, Mobileiron.

Provide a listing of the most current version of a VPP application in the Apple VPP store in the Simple MDM app catalog interface. This will provide a reference to compare the current version available with the version that is installed on each device.

I'd love to be able to add my two YubiKeys as alternate options for two-factor login to the admin console.
Most web interfaces I work with I have two U2F keys enrolled and the usual TOTP token codes as a backup.

In a scenario when a device is stolen we can flag it as stolen in the SimpleMDM interface and have email alerts be sent to the SimpleMDM Admin's when that SN registers with the service. Additionally, it would be handy to have a separate default group for devices flagged as stolen so if the OS is reinstalled and the device re-enrolls it doesn't end up in the company's default group.

While we don't want limits or alerts, we would like to get a monthly tally of how much cellular data each device uses.

I would like to see an iPhone app that I could use to manage all my devices when I am not in front of my computer or iPad.