Privacy and MDM on Bowdoin-Issued Devices

Questions

  • What is Remote Management on my iPad?
  • What can Bowdoin IT see on my device?
  • Can IT read my messages or see my photos?
  • Can Bowdoin track my location through my iPad?
  • Can Bowdoin track my location through my laptop?
  • What is Jamf and why is it on my iPad?
  • What is Mobile Device Management (MDM)?
  • Does Bowdoin IT monitor what I do on my iPad or Mac laptop?
  • Will IT be able to see my personal files if I store them on my Bowdoin iPad?
  • Why did my iPad ask about Remote Management during setup?
  • Why did my laptop ask about Remote Management?

Environment

This article applies to all Bowdoin College students, faculty, and staff using a college-issued iPad or Mac. All Bowdoin-owned Apple devices are enrolled in Jamf, Bowdoin's Mobile Device Management (MDM) system.

Resolution

What is Jamf and why is it on my device?

Bowdoin IT uses a tool called Jamf to manage college-owned Apple devices, including iPads and Macs. Jamf is a Mobile Device Management (MDM) system — a standard tool used by schools and businesses to keep shared devices secure and up to date.

Jamf helps Bowdoin IT:

  • Keep a basic inventory of college devices
  • Install and update apps on managed devices
  • Enforce security settings like device encryption and passcode requirements

Jamf operates within Apple's MDM privacy framework. Apple's architecture is designed so that IT management tools cannot access personal data — even if Bowdoin IT wanted to, the platform does not allow it.

What settings Bowdoin IT controls

To keep devices secure, Bowdoin IT enforces the following settings on college-issued iPads and Macs:

  • A 6-digit (or longer) passcode (for iPads) or an enforced password on an account for laptops.
  • Device encryption
  • Activation Lock — if a device needs to be erased, IT may need to unlock it first. This helps prevent theft and unauthorized resale.
  • No jailbreaking — only Apple-approved operating systems and the official App Store are permitted.

What Bowdoin IT can see

Bowdoin IT has access to basic device and app management information:

  • Device details: make, model, and serial number
  • Software information: operating system version and available updates
  • App details: app name, install date, and app size
  • Device assignment: which college device is assigned to which person (useful when a device is lost or stolen)

What Bowdoin IT cannot see

Because of Apple's MDM privacy rules, Bowdoin IT cannot access any personal data, including:

  • Web browsing: no websites visited, web traffic, or browsing history
  • Personal files: no access to your documents, photos, or videos
  • Messages and calls: no access to iMessage, FaceTime, or any messaging apps
  • Device location: no GPS tracking
  • Screen or app activity: IT cannot see your screen or what apps you are using

Common questions

Can Jamf access files I have downloaded?
No. Jamf does not allow Bowdoin IT to see your downloaded files, your folders, or the contents of any file.

Is my Bowdoin Mac loaded with monitoring software?
Bowdoin-owned Macs are managed with Jamf for security and IT support purposes — not to monitor your personal activity. Bowdoin IT cannot see your browsing history, personal files, or messages.

What happens to my personal data if my device is lost or stolen?
Bowdoin IT cannot recover personal data from a lost or damaged device. If your iPad is erased or replaced, your personal files will be unrecoverable unless you have backed them up — for example, using iCloud or Microsoft OneDrive. See Back Up and Restore Your iPad Using iCloud in the Related Articles section.

Additional Help

If you need further assistance, you have several options:

  • Bowdoin Bot: Chat with Bowdoin Bot directly from any KB page for instant answers.
  • Phone: Call the Bowdoin College Service Desk at (207) 725-3030.
  • In person: Visit the Tech Hub in Smith Union during business hours.
  • Submit a ticket: Request assistance through the Service Catalog.
Print Article

Related Articles (7)

How to back up and restore a Bowdoin-issued iPad using iCloud. Covers enabling automatic iCloud backup, running a manual backup, checking backup status, and restoring from an iCloud backup during device setup.
Frequently asked questions for Bowdoin students about the Digital Excellence Commitment (DExC) program, including what technology is provided, warranty coverage, device ownership, Apple ID requirements, and Bowdoin's use of Mobile Device Management (MDM).
An article that goes over how to self enroll Bowdoin owned Mac computer in to Bowdoin's MDM.
Some Bowdoin-issued iPads did not get enrolled correctly into the Jamf MDM service. This article walks through the steps needed to repair that issue.
Troubleshooting steps for errors encountered during initial iPad setup, including the Remote Management profile error and the Activation Lock screen. Applies to Bowdoin students and faculty setting up a college-issued iPad for the first time.
Step-by-step instructions for setting up a Bowdoin-issued iPad for the first time. Covers unboxing, connecting to Wi-Fi, the Remote Management screen, signing in with a Bowdoin account, and optional first steps like setting up iCloud and Face ID. Applies to all Bowdoin students, faculty, and staff.
How to use AirDrop on a Bowdoin-issued iPad to wirelessly share files, photos, and links with nearby Apple devices. Covers turning on AirDrop, sending and receiving items, and what to do if AirDrop appears limited or unavailable on a managed device.