Difference between Supervised and Unsupervised iPhone, and when you want supervised.
Supervised gives you (the employer) extra MDM control: enforce app restrictions, lock wifi profiles, web content filters, force screen time. Unsupervised is a normal MDM enrollment, user can do more themselves. You want supervised for devices you own, not for BYOD.
Try this first
- 1Supervised only happens via Apple Business Manager + Automated Device Enrollment, making an existing iPhone supervised needs a wipe.
- 2Build an MDM profile with supervised restrictions (Intune: Device configuration > iOS > Device features).
- 3Restrictions that only work supervised: block AirDrop, limit app installs, block screenshots, disable USB data.
- 4Test on a single device before wide rollout, supervised policies can brick an iPhone fast.
When to bring us in
We move your fleet from unsupervised to supervised: ABM link, wipe-and-enroll plan, phased profile rollout.
See also
- Work and personal apps blur together on the same phoneAndroid Enterprise and iOS-with-Intune can enforce a work profile, isolating business apps in a separate container.
- Setting up Microsoft 365 on a new phoneOutlook, Teams, and OneDrive run smoothest if you install Authenticator first and sign the others in afterwards.
- Moving Authenticator to a new phoneMicrosoft Authenticator has built-in cloud backup. Run it before wiping the old device, otherwise everything has to be re-added by hand.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.