iOS and OS X both support a really great Mobile Device Management protocol (MDM) you can do everything you can imagine and then some, and you can even buy the d

iOS and OS X both support a really great Mobile Device Management protocol (MDM) you can do everything you can imagine and then some, and you can even buy the device paired with the MDM server so that it's forced to use your settings and can never be unpaired. IBM makes a front end to this MDM protocol, so they can probably use that. Or Profile Manager, which Apple includes with OS X server. See Air-watch.com for an example of what the MDM protocol allows.