What's New In MDM 6.7




Realistic visual screen layouts: the screen layouts area  now shows a realistic image of an iPad to give you a better idea of how the layout will look on a device.  The layout also now shows the selected background image directly on the layout view.


Web Link Collections as Folders in Locker: When you assign a web collection of sites to devices, the sites will show in a folder in Locker, rather than as individual links.


Push All Missing Apps: In Status, it's now possible to push all missing apps to all devices in the list with a new "Push all missing apps" button at the top of the list.  Note that Control Tower already makes an attempt to push missing apps during each sync, which happens about every 4 hours.  This button allows you to do it more quickly.  It will also push app updates if they are available.  If you have many missing apps on many devices, you should use this with caution to avoid overwhelming your bandwidth.

More automatic attempts to install missing apps:  Previously, when an app installation command is sent, the system would check the device periodically to see if the app finished installing and if it had not installed, or if iOS returned certain ambiguous errors, we would turn off auto-sync for the app and stop making future attempts.  We have improved the process by putting failed apps at the end of the queue to retry up to 3 times before marking it as failed and turning off auto-sync.  The end result is that you should see fewer apps on the missing apps list because we now make more attempts to automatically install them even when the device returns errors.


Lost Mode request indicator: When attempting to enable lost mode for a device, there was no way to know if/when the device received the command and entered lost mode.  We've added a "Lost Mode" status in device details that will show the following:

Enable Requested: The command was sent through Apple, but the device has not yet responded to indicate that it received the command and entered lost mode.  This usually means it's off line, perhaps powered down.
Enabled: The device received the lost mode command and reported back to they system that it has entered lost mode.
Disable Requested: The command was sent through Apple, but the device has not yet responded to indicate that it received the command and released lost mode, most likely because it's off-line.
Disabled: Lost mode is not active on the device

Lost mode is also now available as a column that can be added to the device list via the customize gear.  By adding this column and clicking the header to sort, you can quickly get a list of all devices with a specific lost mode status.
-- Thanks to Paul B at Sacred Heart for the suggestion in the Feature Request forum


Email Profiles: We now support Email profiles for configuring Exchange accounts.  Different profiles can be assigned to iOS and macOS device groups in the same way that restriction profiles are assigned. When configuring a profile, use the variable "$email" (without the quotes) to substitute the user's actual email address, which is their username from the School Users list, and leave the password field blank.  This will prompt the user on their iPad for their password.
-- Thanks to Warren J, Garry S., and Tony N. for discussing this with us in the Feature Request forum.


Variables in PLIST files and content filter settings: PLIST files can be used in managed app configurations as well as web content filter plugin settings.  These PLIST files now support two variables: $udid and $email. The system will substitute the appropriate values for the device UDID or the email address of the user as assigned in School Users when sending profiles to devices.  These variables can also be used directly in the fields on the Web Content Filter Plugin tab in Network Profiles.



  • When viewing user details, the assigned device is now a clickable link to jump to the device details.  Also, the assigned user is now clickable in device details to jump to the user detail record.
    -- Thanks to Ryan S. at Troy Area SD for the suggestion
  • Bulk edit student location or grade: You can now change the grade or location for multiple students from the "More actions..." menu at the top of the users list.
    -- Thanks to Dana R. at Holland Hall for the suggestion

  • TechPilot Locker now shows in the iOS location apps list for all locations.  This is for visual confirmation that you've added it to at least one VPP account, which is required. Unlike other apps, Control Tower automatically assigns the app to all devices in the system automatically, so it appears in this list for reference only and cannot be selected to make assignments.  The "assigned to" column indicates that it's assigned to all devices automatically.
  • Delay macOS updates: This feature was actually available previously, but we forgot to document it!
  • Standard apps for newer iOS versions are now available on the list of apps that can be added to screen layouts: Measure, Voice Memo, Stocks, Files
    -- Thanks to Jesus O. and Nate G. for pointing out the omission of these apps in the Feature Request forum
  • Manually add weblink to collection: You can now add web links to collections by manually entering a URL.  Previously, you could only add a link to a collection if the site was already created as a weblink.


  • In Parent Portal, iOS standard apps (i.e. built-in apps like Clock and Calendar) now show in the same list as installed apps when selecting apps to add to layout, rather than a separate tab.  This makes things more simple for parents
  • In Status, the "Upgrade" button has been relabeled to "Update"
  • In Teacher Tools, the selector for number of devices to show on a page has been removed, as we now show 48 automatically 


  • Parent Portal did not allow curfew to be disabled once it was configured
  • If DEP settings were configured to send a macOS admin password, it had to be reentered on the DEP setup screen any time a change was made to other settings in order to save
Have more questions? Submit a request