IT & Security
Apple Business Manager + MDM
for Room Display iPads
How to manage a fleet of wall-mounted iPads properly: ABM enrollment, supervised mode, Single App Mode, and silent updates — without enterprise complexity.
Short answer: for 1–5 display iPads, skip MDM — Guided Access is enough. From ~6 iPads up, enroll them in Apple Business Manager (free), supervise them with an MDM, and push Single App Mode — your displays become appliances that survive reboots, update on your schedule, and never need a ladder and a passcode again.
MDM sounds like enterprise bureaucracy. For room displays it's actually three specific conveniences. Here's the no-jargon version.
What MDM actually buys you for displays
- Single App Mode. The industrial big sibling of Guided Access: the iPad boots directly into The Room Display after any power cut or update, no human with a passcode required. For iPads mounted high or behind locked enclosures, this alone justifies the setup.
- Scheduled updates. iPadOS updates push overnight instead of an iPad demanding attention mid-Tuesday.
- Remote eyes. Battery state, online/offline, app version — visible from a dashboard instead of a walk-around.
The setup, step by step
Step 1 — Apple Business Manager (free, one-time). Enroll your company at business.apple.com with your D-U-N-S number (most registered companies already have one). Approval takes a few days. ABM is the registry that lets devices be supervised — Apple's term for "this device belongs to an organization, not a person."
Step 2 — Get devices into ABM. New iPads from business resellers can be attached to your ABM at purchase. Existing/used iPads can be added manually using Apple Configurator on a Mac (or the Configurator iPhone app): a wipe-and-enroll that takes ~15 minutes per device. Yes, it erases them — do it before install day, not after.
Step 3 — Pick an MDM. For a display fleet you need the basics, so the simple/cheap tiers are fine: Mosyle, Jamf Now, SimpleMDM, or Apple's own free Business Essentials tier in supported regions. Costs run roughly $1–$4 per device/month — and note the irony budget: even this is optional if Guided Access serves you.
Step 4 — Push the display profile. One configuration profile containing: Single App Mode → The Room Display · auto-lock never · brightness policy · Wi-Fi network payload (so iPads join the right SSID automatically) · software update window (e.g. Sunday 03:00). One ordering rule: configure the app — including the Google/Microsoft sign-in — before the Single App Mode payload applies. iPadOS blocks the interactive sign-in window once the device is locked to one app, so an iPad locked first gets stuck at the sign-in screen. (Google service-account setups are exempt — they never need an interactive sign-in.)
Step 5 — Hang them. From now on, a replacement iPad is: unbox/wipe → enroll → it configures itself → mount. No per-device fiddling.
Do you actually need this?
| Fleet size | Recommendation |
|---|---|
| 1–5 iPads | Guided Access, skip MDM (guide) |
| 6–20 iPads | ABM + a lightweight MDM — worth it for Single App Mode alone |
| 20+ / multi-site | ABM + MDM, non-negotiable; add a spares shelf per site |
The honest threshold: MDM pays for itself the first time a power cut hits a floor of iPads at 8:55 on a Monday. With Guided Access, that's a person with a passcode visiting every door. With Single App Mode, it's nothing — they all came back up on their own.
FAQ
Can I supervise iPads without wiping them? No — supervision requires a reset. For displays this is painless: there's nothing personal on them.
Does The Room Display need anything special from MDM? No special payloads — it's a standard App Store app; any MDM can deploy it and target it with Single App Mode. Just one ordering rule: complete the Google/Microsoft sign-in before Single App Mode locks the device, because iPadOS blocks the interactive sign-in window afterwards (service-account setups excepted).
We have Intune for Windows — does it do iPads? Yes, Intune handles supervised iPadOS fine if you'd rather not add a vendor.
If IT manages your office Macs already, send them this — there's a good chance the ABM and MDM pieces are half set up before you ask.