The last step after setting up your MDM solution and registering your employees is to enroll and assign your Apple devices to users. Remember the migration checklist we shared in section 2? Refer back to that along with your migration plan so you can continue to the next step.
Before enrolling, you need to decide which method will be the best for your business. The two elements you should consider during this process are:
After answering these two questions, you’ll know which enrollment and assignments methods will help you achieve successful Apple device deployment.
Remember: Apple Business Manager simplifies this deployment process, so make sure to complete this integration with your MDM solution before starting the enrollment process as we explained in the previous chapters.
After you’ve created an Apple Business Manager account for your organization, you should move the ABM token to the new MDM solution.
To do this, first:
Complete the device enrollment by wiping your devices. You can do this by sending a command through your current MDM solution or by requesting that your end-users reset their iPads by erasing all content and settings in the Settings app.
The management profiles of the Device Enrollment process are only applied after the reboot of the device. Therefore if the device is not wiped and rebooted, the profile will not be applied and the devices will not be enrolled in the new MDM solution.
There is also the option of enrolling the devices with or without the user interaction. When using the Device Enrollment method, you can assign devices to users through User Authentication, Active Directory Authentication, or Automatic Assignment, which allows you to bypass user authentication.
When you use Apple Business manager, your end-users can have their devices automatically enrolled into the MDM solution when they turn on the devices.
If you don’t have an Apple Business Manager account, you can still enroll devices using Apple Configurator 2 or through a URL-based method.
We provide instructions on how to enroll devices using Apple Configurator 2 in this article.
Important note: remember to make sure that the Wi-Fi network is properly configured for the enrollment. This reduces the risk of the enrollment process being interrupted.
There are a few different methods you can use to enroll Mac computers using your MDM solution. You can use Apple Business Manager, or you can do it manually using an enrollment URL. If your new MDM solution is Mosyle Business, we have an app to help make this process even faster.
When enrolling Mac computers into a new MDM server using ABM, keep in mind that a wipe of the devices is required. This means that if your devices have previously been used, you’ll have to reformat the hard drive, and then the new ABM configuration profile will be applied.
To complete this part of the process, send a remote wipe command from your current MDM solution to the devices that you’d like to re-enroll in the new MDM solution.
If you’re using the terminal command sudo profiles -N, it’s not necessary to wipe the Mac if they’re on 10.12.4 macOS or later. If your devices are brand new and have never been used or turned on, simply take the Mac computer out of the box and turn it on to complete the enrollment into the new MDM solution.
You can also use the Mosyle Business Manager Agent app to enroll your Mac computers.
To enroll your Mac computers in the new MDM solution manually, you can use the Enrollment URL method.
For non-ABM devices, we recommend using the limbo enrollment method.
Limbo status: when your devices are in limbo status, this means that the devices are enrolled in Mosyle Business MDM but have not been assigned to a user
Important note: Mosyle Business supports the traditional imaging method but we suggest enrolling your macOS devices using the Device Enrollment method since it’s a lot faster because of the zero-touch deployment.Get Started with Mosyle Business Now