Google tells me "No, mostly."
user have to enter the Apple ID password for every app installed?
Apps are deployed via MDM, Apple requires an Apple ID and password for
the app to be installed. Apps downloaded and installed via Apple
Configurator do not ...
Get management software for them. Apple provide no program, just API hooks for others to build upon. Meraki have a cloud product we trialled and it seems good enough for most.
Don't set them up with individual accounts. This is a recipe for disaster - forgotten password, no way to distribute new apps to them. Set them up with a single apple account, with a ...
It's a legitimate address range - if Apple's using it as a default address for their routers, then they're doing it wrong.
ARIN confirms that the whole 126.96.36.199/8 range is assigned to "USAISC", and if you take a look at a BGP looking glass, you'll see that 188.8.131.52/18 is being actively routed on the internet by AS668, which is assigned to the US DoD.
Moderated message transport is possible using Outlook or OWA as clients. You cannot do this using iPhone/iPad or any other Exchange ActiveSync based clients.
Hence no Approve/Disapprove buttons for iPhone/iPad
You have to ask the end user to use OWA in iPad for message approval.
Microsoft's guidance here:
When you enable the VPP programme users will authenticate with their own iTunes account when you push apps to them.
First, read this KB article for an overview of how to use
Apple's VPP Managed Distribution model with the Meraki Dashboard.
Obtain a Volume Purchase Program account from Apple, for
business or education.
Download, open in a text editor, and ...
For others who run into a problem with Meraki mobile enrollment please see this answer and the complete discussion that led to this solution http://chat.stackexchange.com/rooms/40681/discussion-between-user5870571-and-tyelford.
On the User Authentication Settings page make sure that the username is entered as domain\user and the port number is 3268.
OK, +1 for the internet, -1 for Apple.
The culprit was mod_spdy on Apache 2.2. I don't know what or how or why, but disabling mod_spdy resolved the issue.
I'm not too happy to leave it like this, but I don't have a choice for the time being.
In the intervening 3.5 years since this question was asked, I presume you found an answer.
But if you didn't, this is what I do on my iPad and iPhone (screenshots from my iPhone since it's what I had handy as I sat in the airport).
Go to Settings, Wi-Fi
Then tap the (i) button on the appropriate SSID
Scroll down and turn on Manual under HTTP PROXY, where ...
I would look into setting up an RDS server to stream IE to RDP clients (and I know there are RDP clients for iPad). Definitely will be cheaper than running a VDI system, since all you'll need is a single RDS host and a bunch of CALs, instead of serious hardware and storage, and VMWare licenses besides Windows desktop licenses that cost more than RDS CALs.
Possible answer: The iPad had the intermediate CA certificate (the one used to sign the client certificates) in its trusted CA store. When I deleted the intermediate CA from the iPad, the client certificate was able to work with Nginx. I also tried installing the intermediate CA as a trusted CA in desktop Firefox, and as soon as I did, I got the same error ...
The proxy server is probably the best solution (because iOS parental controls don't allow you to set a whitelist as far as I can tell). Be aware of one major caveat though: If you let people install apps from the app store they can and will find a way around your proxy restriction.
In order to make this work you will need to combine the proxy settings ...
Novell zenworks has mobile managment software, but that costs money and i'm not sure how much managment it gives with ipad. quick google search found this