Fountain Lake School District Enhances Apple Device Security with Kandji

Challenges

Cybersecurity is a major concern for Arkansas public institutions. Several Arkansas school districts, including Little Rock’s, have been targeted by ransomware attacks, forcing some to pay settlements. For this reason, the Fountain Lake School District IT department complies with CIS benchmarks and installs all the latest OS and app patches, to keep its Apple fleet secure.

Before implementing Kandji, the school district was using Jamf to manage its Apple fleet. But the IT team found it hard to achieve its desired compliance and fleet security with that solution: it was difficult to be sure that all devices were updated to the latest versions, and it took months to achieve compliance. Jamf was inefficient when it came to pushing updates to all devices or ensuring that those updates were properly installed.

On top of that, with Jamf, updates for Apple TV were frequently failing, requiring manual intervention to get them working.

Migrating to Kandji

The IT department decided to transition their Apple fleet management from Jamf to Kandji. They were able to transition their entire Apple fleet of 200+ Mac (using the Migration Agent tool provided by Kandji), 400+ iPad and 200+ Apple TV to Kandji in less than one week.

Solutions and Results

The IT team has been able to address the compliance challenges and ensure that all the operating systems and apps on their Apple fleet are updated in a timely fashion. Kandji has offered several advantages, including:

1. Higher level of automation & improved update management.
   Overall, the IT team reported that Kandji addressed Jamf’s shortcomings, by automating software patching and offering better update management. This has led to:

   • Reduced IT workload
     • The IT team estimates that Kandji saves about 50 percent of the IT team’s time when it comes to keeping the Apple fleet compliant and up-to-date, compared with their previous solution. This allows the IT team to focus on other critical tasks.
   • Faster updates across all devices
   • Improved overall device security posture

   Adopting Kandji has also resulted in reduced downtime for updates, higher productivity for staff, and an improved learning experience for students.

2. Kandji benefits for iPad devices.
   iPad devices in the school district are assigned to math teachers and to students, for interactive learning and for testing. Kandji provided several benefits for the school district’s iPad fleet, including:

   • Improved Security
     • Remote wipe: In the case of shared iPad devices,Kandji allows the IT team to remotely wipe the device, protecting sensitive data.
     • Enforced password policies: The IT team can set strong password requirements and enforce regular changes to minimize hacking risks.
     • App allow/block: Kandji can restrict access to unapproved apps, reducing the risk of malware or inappropriate content.
   • Enhanced Productivity
     • Automated deployments: Kandji can remotely push out new apps,updates, and security configurations to all iPad devices simultaneously, saving IT time and effort.
     • Standardized configurations: Kandji ensures that all iPad devices have the same settings and apps, promoting a consistent user experience.
     • Device tracking: Kandji allows locating lost or misplaced iPad devices to improve asset management.
   • Simplified Management
     • Centralized control: Kandji allows for the management of all iPad devices from a single platform, reducing complexity and streamlining IT workflows.
     • Compliance adherence: Kandji helps the IT team ensure that all iPad devices comply with industry regulations or internal data security policies.
   • The IT team called out two other Kandji features for iPad devices that they found very useful
     • Home Screen Layout: It ensures that the users have the apps they need to get their jobs done, by allowing IT admins to preview the iPad Home Screen layout from the Kandji UI.
     • Managed OS: Automates operating system updates, even for major OS upgrades. That makes it a critical tool for keeping device fleets secure. It also gives users a transparent update experience, so they know exactly what is happening on their devices.

3. Kandji benefits for Apple TV
   Apple TV are used in every classroom of the school district for teacher/student engagement and collaboration. Specifically for Apple TV, the IT team had many OS update issues with its previous solution. Updates frequently got stuck and wouldn't complete unless an admin physically went to the device. Remotely wiping Apple TV was unreliable.

   The IT team reported that Kandji makes managing Apple TV much easier. If they need to restart one, it’s a simple login to Kandji, restart action, and they’re done. They couldn't imagine trying to manage all those Apple TV without Kandji.

Conclusion

The threat of cyberattacks on public institutions, such as the ransomware attack on Little Rock School District, highlights the critical need for robust cybersecurity measures. Fountain Lake School District faced challenges keeping their Apple devices up-to-date and compliant with security patches using Jamf as their MDM solution.

The transition to Kandji proved to be a game-changer. Kandji's automated features, including automatic software updates and improved update management, significantly reduced the time and effort required by the IT team. This not only freed up valuable resources but also ensured faster updates across all devices, leading to a more secure Apple device fleet.

Fountain Lake School District's experience demonstrates how Kandji can empower IT teams to effectively address security concerns in today's evolving threat landscape. By automating tedious tasks and ensuring seamless updates, Kandji allowed their IT team to focus on strategic initiatives while keeping their devices secure.