How To's
Home » » <!--<span>How To's >> Enrollment Techniques</span>--> <span>How To's </span>

Last updated: July 24, 2026

How to choose enrollment techniques for required features?

This guide helps administrators choose the right enrollment technique based on which management features they need. For iOS, supervising devices via Apple Business Manager or Apple Configurator unlocks features like offline Lost Mode, silent app installs, and Single App Lock. For Android, enrolling as Device Owner via NFC enables features such as Exchange ActiveSync configuration and silent app uninstallation.

Description

This document helps you choose the most suitable enrollment technique based on the required features.

Scenarios:

After the devices are enrolled into the Mobile Device Manager Plus server, a wide range of device management features will be made available. Some of these features require the devices to be enrolled using a particular enrollment method.

For iOS devices:

Supervising devices enables extra restrictions that can be applied to the devices. The users can use either of the Admin Enrollment techniques— Apple Business Manager (ABM) enrollment or Apple Configurator to supervise devices. Following are a few features that can be accessed only if the iOS devices are supervised.

  1. Lost mode works without the ManageEngine MDM Self Service app (previously ManageEngine MDM app) and even when the GPS is turned off on the device.
  2. App store and In-house apps can be installed and updated silently.
  3. Devices can be locked to a single app using Single App Lock.
  4. Wireless transfer of files on iOS devices using AirDrop can be restricted.
  5. Apps can be restricted from using cellular data.
  6. Account modification can also be prevented.
  7. Web content can be blocklisted/allowlisted.
For Android devices:

Certain features require the device to be provisioned as a Device Owner to be accessed. To enroll devices as device owner, NFC enrollment can be used.

Following features are available only for devices provisioned as Device Owner.

  1. Configuring Exchange ActiveSync for non-Samsung devices
  2. Silently uninstall blocklisted apps from devices.
  3. Additional restrictions like disabling screenshots, restricting installation of non-market apps can be applied to Device Owner provisioned devices. For the complete list of restrictions that can be applied, refer this.

NOTE: A device can be provisioned as Device Owner using G-suite and Device Policy Controller (DPC) token. For more information on these methods, refer this.

To choose the enrollment techniques for your organization, refer this.

Frequently asked questions

What extra features do I get by supervising an iOS device?

Supervised iOS devices (enrolled via Apple Business Manager or Apple Configurator) support Lost Mode without the Self Service app (previously ME MDM app) or GPS, silent install/update of App Store and in-house apps, Single App Lock, blocking AirDrop, restricting cellular data per app, preventing account modification, and web content allow/block listing.

What Android features require Device Owner provisioning?

Configuring Exchange ActiveSync for non-Samsung devices, silently uninstalling blocklisted apps, and applying additional restrictions like disabling screenshots or blocking installation of non-market apps all require the device to be provisioned as Device Owner.

How do I provision an Android device as Device Owner?

NFC enrollment can be used to provision a device as Device Owner; a device can also be provisioned as Device Owner using G Suite and a Device Policy Controller (DPC) token.