# How to choose enrollment techniques for required features?

Last updated: July 24, 2026

This guide helps administrators choose the right enrollment technique based on which management features they need. For iOS, supervising devices via Apple Business Manager or Apple Configurator unlocks features like offline Lost Mode, silent app installs, and Single App Lock. For Android, enrolling as Device Owner via NFC enables features such as Exchange ActiveSync configuration and silent app uninstallation.

## Description

This document helps you choose the most suitable enrollment technique based on the required features.

## Scenarios

After the devices are enrolled into the Mobile Device Manager Plus server, a wide range of device management features will be made available. Some of these features require the devices to be enrolled using a particular enrollment method.

### For iOS devices

Supervising devices enables extra restrictions that can be applied to the devices. The users can use either of the Admin Enrollment techniques—**Apple Business Manager (ABM)** enrollment or **Apple Configurator** to supervise devices. Following are a few features that can be accessed only if the iOS devices are supervised.

1. Lost mode works without the ManageEngine MDM Self Service app (previously ManageEngine MDM app) and even when the GPS is turned off on the device.
2. App store and In-house apps can be installed and updated silently.
3. Devices can be locked to a single app using Single App Lock.
4. Wireless transfer of files on iOS devices using AirDrop can be restricted.
5. Apps can be restricted from using cellular data.
6. Account modification can also be prevented.
7. Web content can be blocklisted/allowlisted.

### For Android devices

Certain features require the device to be provisioned as a Device Owner to be accessed. To enroll devices as device owner, **NFC enrollment** can be used.

Following features are available only for devices provisioned as Device Owner.

1. Configuring Exchange ActiveSync for non-Samsung devices
2. Silently uninstall blocklisted apps from devices.
3. Additional restrictions like disabling screenshots, restricting installation of non-market apps can be applied to Device Owner provisioned devices. For the complete list of restrictions that can be applied, refer [this](https://www.manageengine.com/mobile-device-management/help/profile_management/android/mdm_configuration_profiles_for_android.html).

**NOTE**: A device can be provisioned as Device Owner using G-suite and Device Policy Controller (DPC) token. For more information on these methods, refer [this](https://www.manageengine.com/mobile-device-management/help/android_for_work/mdm_android_for_work_introduction.html).

To choose the enrollment techniques for your organization, refer [this](https://www.manageengine.com/mobile-device-management/how-to/enrollment-techniques-how-to.html).

## Frequently asked questions

### What extra features do I get by supervising an iOS device?

Supervised iOS devices (enrolled via Apple Business Manager or Apple Configurator) support Lost Mode without the Self Service app (previously ME MDM app) or GPS, silent install/update of App Store and in-house apps, Single App Lock, blocking AirDrop, restricting cellular data per app, preventing account modification, and web content allow/block listing.

### What Android features require Device Owner provisioning?

Configuring Exchange ActiveSync for non-Samsung devices, silently uninstalling blocklisted apps, and applying additional restrictions like disabling screenshots or blocking installation of non-market apps all require the device to be provisioned as Device Owner.

### How do I provision an Android device as Device Owner?

NFC enrollment can be used to provision a device as Device Owner; a device can also be provisioned as Device Owner using G Suite and a Device Policy Controller (DPC) token.