Enrollment profiles for Apple's Automated Device Enrollment

Enrollment profiles are used to control the MDM enrollment and setup of Apple devices that are associated with your organization's Apple Business Manager or Apple School Manager account.

An enrollment profile specifies what happens when new or factory-reset devices are turned on for the first time, and how the devices will be configured as part of Apple's Automated Device Enrollment.

With an enrollment profile, you can configure the following, among others:

Whether you want to manage your organization's devices in Supervised mode
Which setup screens the Setup Assistant displays to the device users during the setup process
If the users are allowed to remove the devices from your organization's mobile device management

You can have multiple enrollment profiles for different purposes.

Enrollment profiles are available on the Enrollment > Apple DEP page once you have connected your GoTo Resolve MDM site with Automated Device Enrollment.

After connecting your GoTo Resolve MDM site with Automated Device Enrollment, you can access the Enrollment > Apple DEP page, where you can create and manage your enrollment profiles.

Default enrollment profile

When you first integrate Apple Automated Device Enrollment with GoTo Resolve MDM, our wizard guides you through the process of setting up a default enrollment profile for your devices. After the integration is complete, you can create additional enrollment profiles on the Enrollment > Apple DEP page, modify and remove enrollment profiles, or set a new profile as the default.

The default enrollment profile can be automatically assigned to devices that are synced from Apple Business Manager or Apple School Manager to GoTo Resolve MDM. This way, GoTo Resolve MDM will automatically apply the default enrollment profile to any new devices when they are powered up for the first time and connected to the internet. Additionally, the default profile is preselected for convenience during device enrollment when manual profile assignment is selected, but you can change it if needed.

Note: Only the default enrollment profile can be automatically assigned to the devices. Moreover, you can only change the profile assignment method of the default enrollment profile.

Manage enrollment profiles for Apple Automated Device Enrollment

Before you begin: You must connect your GoTo Resolve MDM site with Automated Device Enrollment. For detailed information, see Integrating Apple's Automated Device Enrollment with GoTo Resolve MDM.

Create a new enrollment profile

Navigate to Enrollment > Apple DEP.
Select Enrollment profiles > Create new.
Enter a name and description for your enrollment profile, then select Next.
Result: The Add enrollment profile wizard opens.
Configure the enrollment profile, then select Create.
Select Close to exit the wizard.

Results: Your enrollment profile is visible in the Enrollment profiles drop-down list.

What to do next: When you create a new enrollment profile, the profile assignment method is automatically set to Manual. To set the profile assignment method to Automatic or Automatic when user or device is found, the profile must be set as default. To set the enrollment profile as default, select the profile from the drop-down list, then select Set as default at the top of the page.

Edit an existing enrollment profile

Navigate to Enrollment > Apple DEP.
Select Enrollment profiles and find the enrollment profile you want to edit in the drop-down list.
Result: The enrollment profile page opens.
Select Edit in the top-left corner.
Change the enrollment profile settings, then select Save at the top of the page.

Results: The enrollment profile settings change and future devices are enrolled in GoTo Resolve MDM using the new settings.

Note: These changes have no effect on already enrolled devices, because the enrollment profile settings are applied to a device when the device is powered up for the first time after unboxing or a reset. If you want to re-enroll a previously enrolled device using another enrollment profile, the device must be wiped first.

What to do next: If the enrollment profile is not the default profile, the profile assignment method is automatically set to Manual. To set the profile assignment method to Automatic or Automatic when user or device is found, the profile must be set as default. To set the enrollment profile as default, select the profile from the drop-down list, then select Set as default at the top of the page.

Delete an existing enrollment profile

Navigate to Enrollment > Apple DEP.
Select Enrollment profiles and find the enrollment profile you want to edit in the drop-down list.
Result: The enrollment profile page opens.
Select Delete at the top of the page, then select Delete on the pop-up message.

Results: The enrollment profile is deleted and cannot be applied to newly enrolled devices. This does not affect already enrolled devices.

Note: The default enrollment profile cannot be deleted from GoTo Resolve MDM. To delete the enrollment profile that is currently configured as the default, set another profile as default first.

Assign an enrollment profile to a device

Before you begin: Your new or factory-reset device must be added to GoTo Resolve MDM using Apple Business Manager or Apple School Manager.

The enrollment profile assignment can be one of the following:

Manual
Automatic
Automatic when user or device is found

Select a profile assignment method

When you first connect your GoTo Resolve MDM site with Automated Device Enrollment, you can set the Profile assignment method on the Enrollment settings tab of the Configure Device Enrollment Program wizard.

All enrollment profiles created on the Enrollment > Apple DEP page have their Profile assignment method set to Manual by default. The profile assignment method can be changed by editing an enrollment profile.

Navigate to Enrollment > Apple DEP.
Select Enrollment profiles and find the enrollment profile you want to edit in the drop-down list.
If the enrollment profile is not set as default, select Set as default at the top of the page.

Note: You cannot change the profile assignment method of non-default enrollment profiles.
Select Edit at the top of the page.
In the Enrollment settings table, select a Profile assignment method from the drop-down list.
Select Save at the top of the page.

Results: The new profile assignment method will be used to assign the enrollment profile to newly enrolled devices.

Assign an enrollment profile manually

Navigate to Enrollment > Apple DEP and select one or multiple devices by ticking their respective checkboxes.
Select Actions > Assign enrollment profile.
Result: The Assign enrollment profile wizard opens.
Select an enrollment profile from the drop-down menu and optionally define the tags that will be added to the device in GoTo Resolve MDM after enrollment is completed.
Select Assign, then Close.

Results: The enrollment profile is applied to the device, which will act according to the configured settings upon enrollment.

Assign an enrollment profile automatically

Before you begin: An enrollment profile can only be assigned to devices automatically if the profile is set as default in advance.

Automatic enrollment profile assignment can come in handy if you wish to use the same enrollment settings on all of your devices that are synchronized from Apple Business Manager or Apple School Manager to GoTo Resolve MDM.

Assign an enrollment profile automatically when a user or device is found

Before you begin: An enrollment profile can only be assigned to devices automatically if the profile is set as default in advance.

This profile assignment method limits automatic profile assignment to devices whose identifier (IMEI or UDID) has been entered for a user in GoTo Resolve MDM. This way, you can turn on devices that are, for example, stored for later use, without initiating their enrollment.

After adding your devices to your Apple Business Manager or Apple School Manager account, find their device identifiers.

Note: You can export device identifiers from Apple Business Manager or Apple School Manager instead of manually copying them one by one.
Add the device identifiers to GoTo Resolve MDM in either of the following ways:
- Import the device identifiers to GoTo Resolve MDM using a CSV file as described in How to assign users to their devices in GoTo Resolve MDM.
- Open a user entry from the Company > Users page, then select Actions > Add device identifier. Paste the device identifier in the text box, then select Add. You can add multiple device identifiers to a user.
Navigate to Enrollment > Apple DEP and select one or multiple devices by ticking their respective checkboxes.
Select Actions > Assign devices.

Note: Only one user can be assigned this way, which means that if you have selected multiple devices, the same user will be assigned to all of them.
Select a user from the drop-down list, or enter their name or email address in the field, then select Assign.
Select Close to finalize the assignment.

Results: When a new or factory-reset device whose identifier is linked to a user is powered up, the device begins enrollment using the default enrollment profile.

Viewing a device's enrollment profile information

Viewing a device's enrollment profile assignment

The Enrollment > Apple DEP page shows the following crucial information related to devices' enrollment:

Enrollment profile status: Shows whether an enrollment profile is assigned to the device.

Enrollment profile: Shows which enrollment profile is assigned to the device.

Enrollment status: Shows whether the device has completed enrollment.

Note: You can select which columns are visible by ticking a column's checkbox in the Select columns drop-down menu.

If a device added to GoTo Resolve MDM through Apple Business Manager or Apple School Manager is not visible in the table, select the Update device list option at the top of the page.

Viewing the enrollment profile used to enroll a device

You can check which enrollment profile was used to enroll a device by opening the device's page through Management > Devices. For devices enrolled through Automated Device Enrollment, the Enrollment table on the Main tab shows the Type as Device enrollment program. The Enrollment profile row shows which profile was used for the enrollment.

The Type and Enrollment profile information is also available on the Enrollment > Enrollment log page.

Article last updated: 22 April, 2025