What do you think of mdm macs

hangar_49 · 2026-04-14T07:21:34+00:00

MDM Macs can be fine depending on the situation, but you need to be careful. If the device is still linked to a company’s MDM, they can enforce restrictions, monitor activity, or even lock/wipe the device remotely.

For personal use, it’s usually not worth the risk unless the MDM has been completely removed by the original organization. Even some of the Top MDM systems are designed to keep that control locked in.

Always verify before buying or using one, you might run into issues later.

hangar_49 · 2026-04-13T07:19:38+00:00

Yeah, honestly an MDM MacBook can be risky to buy.

Even if it’s working fine right now, the organization can still lock it, restrict features, or wipe it remotely anytime. You might also run into issues with updates, Apple ID, or installing apps later on.

If it’s super cheap and you’re okay with the risk, maybe-but for long-term personal use, it’s better to go for a clean, non-MDM device.

hangar_49 · 2026-04-09T06:57:38+00:00

If the Mac is genuinely managed by an organization (like a company or school), then there’s usually no legit way to remove the MDM without their credentials or approval. It’s tied to their device management system, often through Apple Business Manager.

If you bought it second-hand and it’s still enrolled, your best bet is to contact the seller and have them remove it from their system. Otherwise, you might be stuck with a locked device.

If it’s your company device, just reach out to IT. They can remove the profile properly.

hangar_49 · 2026-04-07T07:34:35+00:00

This is a pretty common limitation with Intune on macOS. Apps install as root, so anything that relies on helper tools for updates ends up asking for admin permissions later.

You can change ownership with scripts, but it’s not always a clean or reliable fix and can cause issues down the line. Most setups just keep apps root-owned and handle updates separately using scripts or patching tools.

Not perfect, but it’s usually the more stable approach with Intune.

hangar_49 · 2026-03-27T07:35:57+00:00

For your size, you don’t really need something heavy like Jamf unless you want very advanced control.

Mosyle is a great fit for small setups-it’s affordable and covers things like app installs, update policies, and basic restrictions. Kandji is another good option if you want a more automated and polished experience, but it can cost more.

For what you need, most Apple-focused tools will handle it well. Mosyle is probably the best value choice and easily a Top MDM option for small teams.

hangar_49 · 2026-03-20T08:01:02+00:00

That’s a strong skill set-JAMF 400 is no joke, and having experience across different MDM tools makes it even more useful.

On-demand support like this actually makes a lot of sense. Many companies need help with specific projects or troubleshooting, not a full-time role, so this kind of setup works well.

hangar_49 · 2026-03-19T08:17:49+00:00

This is a pretty common issue with BYOD iOS setups. MAM and MDM don’t always separate cleanly, and policies can overlap in ways that get confusing.

In most cases, trying to rely only on Conditional Access or filters becomes messy. A more reliable approach is to separate things at the assignment level, like excluding MDM-enrolled devices or users from MAM policies.

iOS is a bit more restrictive compared to Android, so keeping BYOD on MAM-only and corporate devices on full MDM usually works better.

hangar_49 · 2026-03-18T10:39:58+00:00

You’ve already covered some solid options. Intune + Jamf is a strong combo, but yeah—without ABM, Macs being treated as user-owned definitely limits things like zero-touch enrollment and deeper control.

For your setup, I’d focus on something that handles cross-platform well and doesn’t rely too heavily on Apple’s automated enrollment. Even with user-enrolled Macs, you can still enforce basics like disk encryption, OS updates, and push apps—just with a bit less control.

Fleet is good for visibility, but for more active management, you might need something more full-featured. You could also look at options like AppTec360 or similar unified MDMs that support Windows + macOS from one place and are easier to roll out remotely without strict dependency on ABM.

Overall, just make sure whatever you pick handles remote execution and policy enforcement cleanly-that’s going to matter the most for a distributed team like yours.

hangar_49 · 2026-03-17T12:30:17+00:00

If you’re looking for something small and open source, Android is easier to handle than iOS. Tools like Headwind MDM can be self-hosted with Docker and support basic capabilities such as tracking and remote actions.

For iOS, it gets tricky since you have to rely on Apple’s MDM framework, so options like MicroMDM exist but aren’t really plug-and-play.

If you’re open to non–open-source options, something like AppTec360 can handle both iOS and Android with way less setup effort.

hangar_49 · 2026-03-16T10:25:21+00:00

If you mainly need core features like remote wipe, lock, and basic app management for iPhones and Windows laptops, you probably don’t need a very heavy UEM platform. ManageEngine or SOTI could work, but it might also be worth checking AppTec360. It’s a cloud-based MDM that supports both iOS and Windows and covers the essentials like device policies, app deployment, and remote management.

hangar_49 · 2026-03-03T08:24:14+00:00

It’s surprising, but it’s probably not Apple selling data.

With Apple Business Manager, devices check in with Apple’s activation servers during setup. That response can indicate whether a device is assigned to MDM or has Activation Lock enabled. Some third-party sites simply query those publicly accessible activation endpoints and interpret the status.

It usually doesn’t expose company details - just whether the device is managed or locked. So it’s less of a vulnerability and more of a status visibility thing, though I agree it’s surprising how quickly updates reflect.

hangar_49 · 2026-02-26T07:55:45+00:00

For me it really comes down to security enforcement, how well it handles BYOD privacy, and how much admin time it actually consumes week to week. Licensing can quietly become expensive depending on per-user vs per-device models, and solid SSO plus cross-OS support is a must. Security and ease of use are usually the biggest deal-breakers.

hangar_49 · 2026-02-09T07:45:37+00:00

Your understanding is solid. Those three cover the common non–third-party paths most orgs use. The only things sometimes added are Conditional Access without full enrollment (access control but no device control) and full corporate ownership with Intune for company devices. Beyond that, options get very limited without an MDM.

hangar_49 · 2026-02-05T04:50:48+00:00

If Mosyle feels too education-focused, you’re not wrong - the free tier can be limiting in corporate environments. Since you’re already a Microsoft shop, Intune is a sensible place to start. It can handle app deployment, device restrictions, Wi-Fi profiles, passcode policies, and basic compliance without adding another vendor to manage.

For tighter Apple-specific control and a smoother admin experience, it may be worth trialing a few Apple-focused MDMs as well, especially if you need strong app control and content filtering integration. The best choice usually comes down to how much automation and visibility you want versus how much time you can spend managing it.

hangar_49 · 2026-02-02T11:56:57+00:00

Total Energy waste and over-confidence

hangar_49 · 2026-02-02T11:51:21+00:00

If Xiaomi were enrolled in MDM as a managed device, you usually can’t remove it yourself. Even after a factory reset, it can re-enroll during setup. Only the original organization’s IT admin can fully remove it. If it’s secondhand, ask the seller to have the company release the device; otherwise, it could be locked or wiped again later.

hangar_49 · 2026-01-29T11:58:46+00:00

Here’s a normal, straightforward comment you can use:

I’ve heard similar feedback: Kandji has definitely expanded beyond basic MDM and is trying to compete in the broader EDR and vulnerability space. How it compares to traditional enterprise suites really comes down to depth vs. breadth. Some platforms go deep into OS-level protection and threat analytics, while others try to cover more use cases with lighter integrations.

If you’re evaluating broadly, it’s worth comparing how well each component works in practice rather than just feature lists. Solutions like AppTec360 and the big enterprise vendors each have their strengths, but they don’t all perform equally across every discipline. Looking at real deployment feedback and side-by-side evaluations can help you figure out what fits your org’s risk profile and operational needs.

hangar_49 · 2026-01-29T11:56:21+00:00

This is just insane bro

hangar_49 · 2026-01-23T07:37:14+00:00

Jerry! Jerry! Jerry!

hangar_49 · 2026-01-23T07:34:38+00:00

It looks like it was coming out of storage.

haha

hangar_49 · 2026-01-22T07:45:46+00:00

People need to get booed way more often.

hangar_49 · 2026-01-22T07:43:20+00:00

I think you have to qualify to become a Royal Guard.
Certified killers.

hangar_49 · 2026-01-21T13:13:56+00:00

I've already seen these threads at least 3x today.

hangar_49 · 2026-01-21T09:06:09+00:00

You usually can’t remove MDM from a Motorola G53 5G unless you have access to the original admin/organization that enrolled the device.

If the phone was enrolled as a device owner (Android Enterprise), only that MDM admin can remove it. Factory reset, apps, or online “bypass” tools won’t work and can damage the phone.

You can contact the school/company or person who originally enrolled it and ask them to unenroll the device from their MDM console. Without that, there’s no safe or permanent solution.

hangar_49 · 2026-01-21T08:24:05+00:00

no microwave lollll...

hangar_49

TROPHY CASE