iPhone Configuration Utility 2.0

For CalDAV, you have the Account Description, Server DNS name or IP Address and port, optional username and password, and should the account use LDAP. From the IT POV, the setup is dead simple.

Existing options get some new tricks as well. For example, when I'm configuring company-issued iPhones, I can set the profile to be unremovable except by wiping the device. I can still enforce a passcode, but I can require a more complex passcode, with non-alphanumeric characters, I can set aging/autolock/passcode history, I can set a grace period, (how long the device can be locked without requiring a passcode to unlock), and one that could be of great advantage to iPhone users with sensitive data on the device, maximum number of failed attempts. This lets you set a maximum number of failures on the device, (between 4 and 16). If that number of failures is reached, the device automatically erases all the data on the device. This is handy when dealing with a thief smart enough to prevent a remote wipe by using Airplane Mode.

In the restrictions section, you can completely lock a user out of Explicit content, Safari, YouTube, the iTunes Music Store, the App Store, or installing their own apps on the device, as well as the camera.

Camera control is important for companies where security is an issue, and this may get the iPhone in the door in organizations that might otherwise consider a smartphone with a camera to be too high-risk for their employees to use.

Because ICU allows for multiple Configuration Profiles, I was able to create LDAP-only profiles for my existing users already on Exchange ActiveSync. If you have profiles that only differ by a single feature, (i.e. VPN users vs. Non-VPN users), then you just duplicate the profile, and make your modifications.