What's New In MDM 6.7?



Realistic visual screen layouts: the screen layouts area now shows a realistic image of an iPad to give you a better idea of how the layout will look on a device.  The layout also now shows the selected background image directly on the layout view.

Web Link Collections as Folders in Locker: When you assign a web collection of sites to devices, the sites will show in a folder in Locker, rather than as individual links.

Push All Missing Apps: In Status, it's now possible to push all missing apps to all devices in the list with a new "Push all missing apps" button at the top of the list. Note that the Control Tower already makes an attempt to push the missing apps during each sync, which happens about every 4 hours. This button allows you to do it more quickly. It will also push app updates if they are available.  If you have many missing apps on many devices, you should use this with caution to avoid overwhelming your bandwidth.

More automatic attempts to install missing apps:  Previously, when an app installation command was sent, the system would check the device periodically to see if the app had finished installing and if it had not been installed, or if iOS returned certain ambiguous errors, we would turn off auto-sync for the app and stop making future attempts.  We have improved the process by putting failed apps at the end of the queue to retry up to 3 times before marking it as failed and turning off auto-sync.  The end result is that you should see fewer apps on the missing apps list because we now make more attempts to automatically install them even when the device returns errors.

Lost Mode request indicator: When attempting to enable lost mode for a device, there was no way to know if/when the device received the command and entered lost mode. We've added a "Lost Mode" status to the device details that will show the following:

Enable Requested: The command was sent through Apple, but the device has not yet responded indicating that it received the command and entered lost mode.  This usually means it's off-line and perhaps powered down.
Enabled: The device received the lost mode command and reported back to they system that it has entered lost mode.
Disable Requested: The command was sent through Apple, but the device has not yet responded indicating that it received the command and released lost mode, most likely because it's off-line.
Disabled: Lost mode is not active on the device.

Lost mode is also now available as a column that can be added to the device list via custom gear.  By adding this column and clicking on the header to sort, you can quickly get a list of all devices with a specific lost mode status.
-- Thanks to Paul B at Sacred Heart for the suggestion in the Feature Request forum

Email Profiles: We now support email profiles for configuring exchange accounts.  Different profiles can be assigned to iOS and macOS device groups in the same way that restricted profiles are assigned. When configuring a profile, use the variable "$email" (without the quotes) to substitute the user's actual email address, which is their username from the School Users list, and leave the password field blank.  This will prompt the user on their iPad for their password.
-- Thanks to Warren J, Garry S., and Tony N. for discussing this with us in the Feature Request forum.

Variables in PLIST files and content filter settings: PLIST files can be used in managed app configurations as well as web content filter plugin settings.  These PLIST files now support two variables: $udid and $email. The system will substitute the appropriate values for the device UDID or the email address of the user as assigned in School Users when sending profiles to devices.  These variables can also be used directly in the fields on the Web Content Filter Plugin tab in Network Profiles.



  • When viewing user details, the assigned device is now a clickable link to jump to the device details.  Also, the assigned user is now clickable on the device details to jump on the user details record.
    -- Thanks to Ryan S. at Troy Area SD for the suggestion
  • Bulk edit student location or grade: You can now change the grade or location for multiple students from the "More actions..." menu at the top of the user list.
    -- Thanks to Dana R. at Holland Hall for the suggestion

  • TechPilot Locker now shows in the iOS location apps list for all locations.  This is for visual confirmation that you've added at least one VPP account, which is required. Unlike other apps, the Control Tower automatically assigns the app to all devices in the system automatically, so it appears in this list for reference only and cannot be selected to make assignments.  The "assigned to" column indicates that it's assigned to all devices automatically.
  • Delay macOS updates: This feature was previously available, but we forgot to document it!
  • Standard apps for newer iOS versions are now available on the list of apps that can be added to screen layouts: Measure, Voice Memo, Stocks, Files
    -- Thanks to Jesus O. and Nate G. for pointing out the omission of these apps in the Feature Request forum
  • Manually add web links to the collections: You can now add web links to collections by manually entering a URL.  Previously, you could only add a link to a collection of sites that were already created as a web link.


  • In Parent Portal, iOS standard apps (i.e., built-in apps like Clock and Calendar) now show in the same list as installed apps when selecting apps to add to the layout, rather than a separate tab.  This makes things simpler for parents
  • Under Status, the "Upgrade" button has been relabeled as "Update"
  • For Teacher Tools, the selector for the number of devices showing on the page has been removed, as we now show 48 automatically 


  • Parent Portal does not allow curfew to be disabled once they are configured
  • If DEP settings are configured to send a macOS admin password, it has to be re-entered on the DEP setup screen any time a change is made to other settings in order to save.
Have more questions? Submit a request