The deployment, enrollment and management features are really based on your budget. If you only have $100 budget and a 10.7 Mac, Lion Server with Profile Manager is a fine choice, it bring the management in house which I always enjoy. It gives you
- Clear Passcode,
It does not give full disk encryption, app delivery, or remote desktop.
I think the best solution, although I have not tested it, is to use SCCM 2012 as it is cross platform, easily virtualized and can used Active Directory natively.
I think the real challenge that can be easily overlooked is why to use the device at all. Mobile phones, fine, you have data that should not be exposed. Tablets in Higher Ed? The challenge is how to integrate them into the classroom, how to make them useful tools. That's where the money and energy need to spent, researching the purpose. Managing the devices is the easy part.