iPad management

iPad management @ MPPS

Username: srv3846wifi
MPPS is password: MintKoala4

To add apps, our email for Apple School Manager and VPP store is: melroseparkasm@gmail.com Password is Local3846, a TF verification is sent to one of two phone number... Pam or...?

Jamf training: https://account.jamf.com/

pam.grover@det.nsw.edu.au Password: MPPSteacher3846

Regular checks in Jamf:

Are all iPads periodically connecting to Jamf? If not, check the iPad is connecting to the Wifi. See below on how to reconnect to Wifi. If iPads drop off the system it can be real pain to reconnect them and very time consumimg!
Are apps up-to-date? Go to Apps - Inventory - select the app (or all apps) and sync with Apple manager. To expedite the process, go to Apps - updates - choose the app and click on the refresh icon (under Actions) on the right hand side. Or select all apps and update (top right).
Update the OS on devices. Devices - updates. A read number will indicate the number of devices that need updating. Click in the update tab - choose a group, the download and update. If iPads fail to update it may be beacuse it is not plugged into power or not enough available space for the download. Check the iPad for excessive number of videos or photos. Any videos/photos from previous years can be cleared. Check with the teacher for more recent.

Apple School Manager (ASM) is required to obtain new apps (free or bought) and set up new iPads prior to adding to Zuludesk/jamf.
Site manager: Jane Cummins
Administrator: melroseparkasm@melrosepk-p.schools.nsw.gov.au Password is Local3846
Content managers: Pam, Jen Ko

iPads purchased via EdBuy automatically are added to ASM and are enrolled in jamf for 4 years.
Or can buy from Think3 with a perpetual licence (for same price).

To buy new iPads via EdBuy the code is: Organisation ID: 22097436

Download a content token:

In Apple School Manager , sign in with a user that has the role of Administrator, Site Manager, or Content Manager.
Select your name at the bottom of the sidebar, select Preferences , then select Payments & Billing .
Under Content Tokens, select the token name where the MDM server is assigned.
Upload to Jamf School.

If WIFI is playing up:
1. Make sure that HTTP proxy is set to AUTOMATIC go to wifi network in settings and click in the small "i", scroll to the bottom, then choose AUTOMATIC.

2. Reset Network setting – in Settings, go to General - Reset - Reset Network Settings

Username: srv3846wifi
Password: MintKoala4
(use for school owned devices only)

Our iPads are managed using Jamf School (formerly Zuludesk) which is managed in NSW by https://www.think3.com.au/ (Scott & Lucy Barnham)

Currently the three teachers who have authorisation to access Zuludesk/jamf are: Pam Grover, Talitha de Jager and Jen Ko.

Renewing the Automated Device Enrolment Token (previously named DEP)
Sign into Apple School Manager (school.apple.com), then click on the pop-up in the User menu in the bottom left, then 'Preferences', then under 'Your MDM Servers' select your server (Jamf MDM server or Zuludesk) and then click 'Download Token' in the top menu to download the token file.

Then in Jamf School > Organisation > Settings > Automated Device Enrolment, you can click the pencil icon and upload a new token. DO NOT CLICK THE TRASH ICON.

Annual updates required in Jamf for ipads to keep working:

Automated Device Enrolment Sep 02 2026
A token needs to be created in ASM and loaded into Jamf. Fairly complex but follow the following instructions.

Download a content token
• In Apple School Manager, sign in with a user that has the role of Administrator, Site Manager, or Content Manager.
• Select the school name at the bottom of the sidebar, select Preferences , then select Payments & Billing.
• Under Content Tokens, select the token name where the MDM server is assigned.
• Upload the content token into Jamf.

Apple Push Certificate - Jul 31 2025
Content VPP - Sep 02 2026
These are replaced in Jamf - Organisation - Settings. See instructions on how to replace each one by searching the help menu or information on the page.

Please login at Jamf School, go to Organization -> Settings -> Content (Volume Purchasing) and click on the replace icon.

Books are different to Apps.

Book files needs to be added to Documents (left tab in Jamf) then assigned to a group.

Enroling and Setting Up new iPads

Setup new iPad in Jamf:

Once you have a profile assigned to the iPads, it's time to enrol the iPad into ZuluDesk through the setup assistant on the iPad.

NOTE: It is no longer necessary to wipel iPads before enrolment.
To setup and enrol and iPad, follow these steps:

Wake up the iPad
Select 'English' as the language
Select 'Australia' as the country
If you see the Quickstart screen, select 'Manually'
BEFORE YOU JOIN WIFI, press the iPad's physical home button, and a menu will appear
Select 'WiFi Settings'
On the WiFi screen, click the blue info circle next to your WiFi network
Scroll to the bottom of the screen and change the proxy setting to 'Automatic'
Click the 'Save' button at the top
Join the WiFi network using your WiFi Service Account (srv3846wifi@detnsw) and MintKoala4
Trust the certificate when prompted
On the 'Remote Management' screen, select 'Apply'
Enable 'Location Services'
Select 'Get Started'

The iPad is now enrolled in ZuluDesk. Look in ZuluDesk > Devices to see your iPad. You now need to add it to the groups (e.g. All iPads and Stage 1) to which it belongs so that the apps and profile will be applied.

Our 'Managing iPads with ZuluDesk' workshop is a self-paced, web-based format. An online course for which MPPS has paid and essential knowledge in setting up new iPads and adding them to the Zuludesk (Jamf) MDM system. The course is regularly updated.

Here are instructions to enrol in the course. Use the redeem coupon shown below so you don’t need to provide credit card details.

To login to the online course, follow these steps:

1. Go to http://courses.think3.com.au

2. Click “Sign Up” in the top right corner and create an account

3. On the payment page, click ‘Redeem Coupon’ and enter ORD-4292

4. Click “Continue to course” and begin learning.

Bulk renaming iPads (from think 3 course)
You can keep adding to the spreadsheet and import it again and ZuluDesk will ignore the rows already imported and only import the new rows. If you want to change iPad names in the future, simply edit the spreadsheet and re-import. ZuluDesk will then gradually change all the iPads. If the iPads are now in different Device Groups, apps will uninstall or install themselves till the right set of apps is on the iPads. All automatically, all over WiFi. Fabulous to watch.

To re-enroll a device (as per Jamf help)

I did this once to re-enrol a 6th gen iPad and it worked. I don't think will work with older iPad 4s. For this, see below.

First, connect the iPad to wifi
Scan the QR code with your Camera app by going to Jamf - Devices - Enroll devices, then + On-device enrollment (iOS & macOS)
Or, on the device, go Safari and go to: melrosepkp.jamfcloud.com/enroll
Enter your Network ID: 46977188
Enter your Location Code: 3876
Press 'Enroll'
In the Profile window that appears, press 'install', then 'install' again to confirm
Go to settings – Device Management – click "install" (blue) in top right

If the device remains unsupervised - supervise it using Configurator 2 then add the profile by scanning the QR code. This worked for me last time with the Library Kisok iPad.

Nathan Webb (Think 3) commented November 2025

Hi Pam,

I have created and scoped a wi-fi profile for all iPads (Wi-Fi Profile 2026).

I would suggest that you do the following on any iPads with the connection issue:

- On the iPad > Settings > Wi-Fi (join to a non-DoE network such as your phone hotspot) > wait a few minutes to see if the iPad checks in to Jamf, you will know if the 'Managed networks' shows 'detnsw' as an option. Select it and make sure to forget your phone hotspot.

To un-enroll

On the device, open 'Settings'
Select 'General' and select 'Profiles'
Select 'Jamf School Management'
Click 'Remove', then 'Remove' again to confirm

Reimaging older iPads using Apple Configurator 2 (Apple computer needed)

Device no longer managed!

The management profile has been removed from device at Wed Mar 10 14:49:12 2021! You are no longer able to manage this device unless you re-enroll it.

Apple has removed all support for iOS 10, and devices cannot be wiped/re-enrolled as they were before. Any that haven't dropped off Jamf School can still be used for robotics and basic Apps. Any other iOS 10 devices should be sent to e-waste.

Reimaging older iPads

Connect to Configurator 2 on the Apple computer with an Apple Lightning Cable
Allow the iPad to connect to the computer by clicking "trust" on the iPad screen, then click on the iPad image.Actions - Advance - "Erase all contents and settings"
Once erased, click on the iPad image again, then "Prepare" on the tool bar.
Assign to Melrose Park PS
You need to be on WiFi for the profile to load onto the iPad.

When you get to adding WiFi, click on the HOME button to get more options. Click in the i (information) button next the wifi network and select "Configure Proxy Auto", the join the network.

(The next steps seem to change each time.)
In Prepare Devices choose "Manual Enrollment".

Manual settings (if required):

If iPad 4s or less, here is something that should work, though you may not like it....

Firstly, you need to erase the ipads. This will clear whatever proxy info has been stored along with any credentials.
When setting them back up again, you will need to enter the srvxxxwifi@detnsw account as the wifi username and your school password. Press the Home button during wifi network selection page to bring up the More Wifi settings option. Set the Proxy to Automatic. Proceed to configure as normal.
New security means you will use detnsw.net to login. This can be any staff or student login and has no effect on the wifi account

If that doesn't work:
In Apple configurator select Blueprints select add Zuludesk Blueprint to add to the device. It should the find this Blueprint when you go through the set up procedure on the device.

The managemnt profile has been downloaded from Jamf to Apple Configurator.

Wifi and Proxy management

Pam,

You may have installed a WiFi profile using Apple Configurator. If so, then we need to make a change.

You should be able to go onto the iPad in Settings > General > Profiles & Device Management and delete the Configurator-added WiFi Profile from there.

Then join the WiFi again manually, and you will be in a much easier place going forward without WiFi profiles.
Scott (Think 3)
Advice December 20

NSW DoE Proxy Update

All schools have now been cutover the SPA (secure proxy authentication).

Now, when prompted for proxy authentication for internet access, the username changes from the format firstname.lastname to firstname.lastname@detnsw

Many schools are experiencing continual proxy authentication requests since the SPA cutover. This is most likely due to an old username and password stored on the iPad being sent to the proxy and the device is then unable to access the Internet, or are continually prompted for proxy authentication with one or both of these dialogue boxes.

Schools are having success solving these issues by following these steps:

1. Remove WiFi – either by clicking ‘forget network’ on unmanaged devices, or removing the WiFi profile if one was installed with Apple Configurator or ASM.

2. Reset All Settings – on each iPad select Settings > General > Reset > Reset All Settings.

This will NOT delete apps or documents, just some of the settings unlike ‘Erase all Contents and Settings’ which will completely wipe and factory reset the iPad.

3. Re-Join WiFi – Either manually join WiFi again, or reinstall the WiFi Profile using Configurator.

4. Proxy Authentication – Enter a username and password in the new format with @detnsw on each iPad so it can access the Internet.

Advice from Think 3

Schools use proxy servers to filter Internet access for students and teachers. The iPad usually needs to be configured to look use the proxy for Internet access, and then users will be prompted with a username and password so the server can appropriately filter the Internet for that user:

The iPad tries to be helpful and save the user time, by saving the Username and Password for the proxy into a 'Keychain' so that next time the proxy requests authentication, the iPad can simply send the credentials and the user won't be prompted.

This is all wonderful until the user who authenticated changes their password on the staff or student portal. From now on, the iPad keeps sending the old password, which the proxy server rejects. The endless loop of proxy authentication request pop-ups then begins.

The easiest solution is to erase the iPad and re-enrol it.

The less destructive option, especially for student and teacher personal devices with data on them is to:

'Unconfigure' WiFi by using 'Forget this network' or removing the WiFi Profile
Select iPad > Settings > General > Reset > Reset All Settings
Then join the WiFi again.

To reduce the likelihood of issues, they recommend using the WiFi Service Account... Username: srv3846wifi@detnsw
MPPS is password: MintKoala4

BYOD and wifi...

For BYOD iPad or phone, after joining DETNSW WiFi, you need to set the proxy. Most devices will work if you choose to AUTOMATICALLY DETECT, but some will require you to set the Automatic proxy to http://pac.det.nsw.edu.au/fib/proxy.pac - they'll then get the proxy authentication popup and they'll be asked to put in their first.last@detnsw and their password.

BYOD Mac wifi etc

For BYOD on Mac - use the Locations pop up that you''ll see on the Networks preference.

Typically it is set to Automatic.

However, if you create a School location, the wi-fi settings (and proxy) can be applied just when they are at school (and not at home).

So you visit the Wi-Fi > Advanced > Proxies tab when the location pop up is set to School and set to Auto Discovery. Possibly turn it off for Automatic location (or a home location). So this means the proxy is only active when you've selected the School location.

Note that you can have different proxy settings for the Ethernet network separately to wi-fi.

Connecting your own Macbook on our DET Network

Page updated

Report abuse