5 ways of using Device Groups in your Apple deployment in Enterprise

5 min read

by Mosyle Team

@mosyle_biz

5 ways of using Device Groups in your Apple deployment in Enterprise

Mobile device management (MDM) solutions can streamline your company’s Apple device deployment and management, but you may be wondering how you can use it with greater control. What if you want to give employees access to specific apps, software or sensitive information when using Apple devices at work? After all, people from different departments might not need the same applications or configurations.

With Device Groups on Mosyle Business, you have the ability to enhance your Apple device deployment and have more control over the process. In this article, we’ll go over what Device Groups are and how you can use them.

What are Device Groups?

This option simply means that you can group devices either by selecting specific devices or using specific criteria. Device groups can help you organize your company’s hierarchy, which you can read about here. By adding devices to a device group, you'll be able to filter and send commands/profiles based on the group.

For example, if you want to deploy Microsoft Office software to devices in the Accounting department, you can create a group using the serial numbers for the devices belonging to that department. We recommend adding device tags in Mosyle Business for easier organization of your Apple devices, which we’ll go over this later in the article.

To create a new device group, open Mosyle Business and go to the Management tab. Then, click Device Groups from the menu on the left. Click Add Device Group. Enter the name of the group, and select the device(s) to be included in the group and/or select any criteria to be used to add devices to the group. The more criteria you add, the more specific the device group will be.

Device Groups can be created as groups, as well as subgroups. Because of this, the last option asks where the group should be placed. The base level is "Root".

Read on to understand more scenarios in which you can use Device Groups to streamline Apple management in your company:

1. Dynamically oversee OS Updates on Mac computers

You can use the device groups feature to check on the OS version for a specific group of Apple devices. Devices will be added to the group when the OS update status is available or 100% downloaded, helping the system admin to keep track of the OS version devices are running. For example, they can see if the devices are running macOS Catalina already or not. In Mosyle Business, you can choose criteria for OS build, version or update.

2. Tags for monitoring specific inventory criteria

Admins can create different tags in order to monitor the Apple device fleet. To add tags to your devices, navigate back to the Devices section from the menu on the left and click the + button in the Tags column. To create a device group using tags, go to the Device Criteria section. Choose tags as the criteria and choose the tag you’d like to associate with this group of devices. For example, you can choose tags that contain the word “Accounting” if you would like to group all the devices that are being used by the members of this department.

3. See if security policies are broken

You can see if the Filevault Encryption or FDE Personal Recovery Key are disabled using Device Groups. You can also check out the last WAN/LAN IP or Wi-Fi network connected in which the end-user connected using the Mac computer (load balance of the Wifi hotspots), if the system integrity protection is disabled. This can help you ensure the security of your fleet of Apple devices.

4. Storage of Devices

In some scenarios, admins need to monitor the storage of Apple devices, especially when using machines as servers or caching servers. In this case, you can select different criteria related to device storage, such as storage used or total storage. Using this criteria lets you know which device storage needs to be reduced to keep your overall workflow running smoothly. When the device meets the criteria, it will be moved to this specific device group and you will be able to solve this with the best practices of your organization.

5. Custom Scripts

For Mac computers, admins can create criteria for the Device Group based on custom scripts. Scripting allows you to automate certain processes, giving you the ability to complete a number of commands, such as shutting down/restarting a device, installing updates and more. Discover how you can use custom scripts with Mosyle Business here.

Those are five ways that you can use Device Groups for your fleet of Apple devices. If you need help creating device groups or want to know more about how you can use them to elevate your device management, feel free to contact our Customer Support team by navigating to the Help Center. Our team is always happy to help!

Ready to take advantage of Mosyle Business? Start a free 30-day trial here!