Restoring Backups During MDM Enrollment

Satish Shetty Updated by Satish Shetty

Overview

When moving iPhones or iPads from unsupervised (personal / unmanaged) to supervised mode using the Codeproof MDM platform, users may keep their personal data by restoring from an iCloud backup. However, restoration is only possible during the initial Apple Setup Assistant process, not afterward.

What Gets Restored

When restoring from iCloud during Codeproof-supervised enrollment, the following data linked to the Apple ID comes back onto the device:

  • Messages
  • Photos
  • Apps
  • Settings

Note: Some apps may require manual re-authentication the first time they are launched after restore.

Key Limitations & Requirements

Condition

Details

Different device required

Backups cannot be restored to the same device that created them, because that would also restore the unsupervised state. Migration must be to a new or replacement device.

Apple Business Manager (ABM)

For ABM-enrolled devices, restoration is limited to iCloud Backup. The device-to-device transfer option is disabled by Apple.

Same-device backup migration

Not supported when migrating from unsupervised → supervised same device. Apple documentation is here.

Codeproof MDM Setup Requirements

To ensure a successful restore during supervised enrollment, configure the Setup Assistant settings in the Codeproof MDM console to allow:

  • Sign in with Apple ID and iCloud
  • Restore from Backup

Without these options enabled in Codeproof Dashboard prior, users will not be able to complete backup restoration during supervised enrollment.

Step-by-Step: Restoring From iCloud During Setup

  1. Power on the iOS device and begin the Apple Setup Assistant wizard,
  2. Select language and region.

  1. Choose Country

  1. Connect to Wi-Fi.

  1. Choose Restore from iCloud Backup.
    1. sign into iCloud using your Apple ID and password.
    2. Select the iCloud backup you want to use and wait for the restore process to complete.
    3. If prompted, enter the passcode for your device to continue the restore process.
    4. Once the restore process is complete, you will be prompted continue the setup process.

  1. Remote Management (MDM) - Follow the enrollment instructions in the setup assistance.

Troubleshooting & Tips

  • Verify the backup was created with the same or newer iOS version as the target device.
  • For ABM devices, confirm that the device is assigned to your Codeproof MDM server token in Apple Business Manager before starting setup. In the Codeproof MDM console, configure the Setup Assistant profile to allow Sign in with Apple ID, Restore from Backup, and related options.
  • Some apps may require re-authentication after restore.
  • Ensure sufficient storage space and battery power (or keep the device plugged in).

Restoring Android Devices During Fully Managed Enrollment

When enrolling Android devices into Codeproof MDM (via Android Enterprise, Zero-Touch, or QR-code enrollment), restoring a personal backup is also possible. However, the restore process depends on the Android version and the chosen enrollment method.

What Gets Restored

When users sign in with their Google Account during device setup, the following can be restored from Google cloud backup (if available):

  • Apps installed from Google Play
  • Call history
  • Contacts, calendar, and email (if synced)
  • Device settings (Wi-Fi, wallpapers, etc.)
  • SMS (on some devices and versions)
  • Photos (if backed up via Google Photos)

Codeproof MDM Setup Requirements

To allow backup restore during Android enrollment:

  • Enable “Allow user to sign in with personal Google account” in the Codeproof MDM console Setup policy (if personal restore is desired).
  • For corporate-only (fully managed) devices, you may disable this option to prevent restore of personal data.
  • Ensure network connectivity during setup — restores require Wi-Fi or mobile data.

Restoring Google Account Data

  • During Setup (recommended):
    If the user signs in with their Google account while going through the initial setup wizard, they can restore an existing cloud backup (apps, contacts, settings, etc.). This is the only point where a full device restore from Google’s backup service is possible.
  • After MDM Enrollment (later):
    Once Codeproof enrollment is complete, a user can still add their Google account to the device. However:
    • This will only sync account-linked data (contacts, calendar, Gmail, Drive, Photos, etc.).
    • It will not restore apps, settings, or a full backup image. Those are only restored if the Google account is added during the initial setup wizard.

Step-by-Step: Restoring During Android Setup

  1. Factory reset or unbox the new device.
  2. Start the setup wizard.
  3. Connect to Wi-Fi.
  4. Depending on enrollment method:
    • Zero-Touch / QR-code: Device automatically downloads Codeproof agent and MDM policies.
    • Manual enrollment: Enter enterprise credentials or scan QR.
  5. When prompted to sign in with a Google account:
    • Enter personal Google ID to restore backups.
    • Select the backup (if more than one).
    • Wait for apps/data to restore.
  6. Once restore completes, the device continues Codeproof MDM enrollment and applies policies.

Troubleshooting & Tips

  • Backup must be created on the same or newer Android version as the restore target.
  • Corporate policies may restrict restoring personal accounts and data.
  • Work Profile enrollment never restores apps/data inside the work profile — only the personal side.
  • Some OEM-specific backup tools (Samsung Smart Switch, Mi Cloud, etc.) may not function during Zero-Touch enforced enrollment.

Samsung Switch Migration App

Samsung Smart Switch is a free Samsung application that makes it easy to back up, transfer, and restore data during MDM migration. With Smart Switch, you can:

  • Back up and restore data to/from a PC or SD card.
  • Transfer data wirelessly or via USB cable between devices.
  • Migrate from iPhone to Samsung Galaxy, or from an older Galaxy device to a new one.

This flexibility allows Samsung users to retain personal content such as contacts, photos, messages, and apps while enrolling into Codeproof MDM.

For step-by-step instructions, please follow Samsung’s official Smart Switch guide.

Samsung Switch and Google Account backup Comparison

Option

Supported Devices

What It Restores

When to Use

Notes

Google Account Backup

All Android devices (non-Samsung + Samsung)

Contacts, calendar, Gmail, Wi-Fi, wallpapers, some app data

During initial setup (full restore) or later (account sync only)

Full restore possible only during setup wizard. After enrollment, adding a Google account will only sync data (not apps/settings).

Samsung Smart Switch

Samsung Galaxy devices only

Contacts, photos, messages, apps, device settings

Before or during migration

Can transfer data from iPhone → Galaxy, or old Galaxy → new Galaxy. Also supports restore from PC or SD card. More flexible than Google Backup.

✅ Recommendation:

  • For Samsung devices → use Smart Switch for the most complete migration.
  • For non-Samsung devices → rely on Google Account Backup during setup, then re-add Google account after enrollment for ongoing sync.

For questions, chat with the MDM experts at CODEPROOF.

How did we do?

Bulk Device Enrollment

Contact