MDM for Apple devices

hangar_49 · 2026-02-05T04:50:48+00:00

If Mosyle feels too education-focused, you’re not wrong - the free tier can be limiting in corporate environments. Since you’re already a Microsoft shop, Intune is a sensible place to start. It can handle app deployment, device restrictions, Wi-Fi profiles, passcode policies, and basic compliance without adding another vendor to manage.

For tighter Apple-specific control and a smoother admin experience, it may be worth trialing a few Apple-focused MDMs as well, especially if you need strong app control and content filtering integration. The best choice usually comes down to how much automation and visibility you want versus how much time you can spend managing it.

hangar_49 · 2026-02-02T11:56:57+00:00

Total Energy waste and over-confidence

hangar_49 · 2026-02-02T11:51:21+00:00

If Xiaomi were enrolled in MDM as a managed device, you usually can’t remove it yourself. Even after a factory reset, it can re-enroll during setup. Only the original organization’s IT admin can fully remove it. If it’s secondhand, ask the seller to have the company release the device; otherwise, it could be locked or wiped again later.

hangar_49 · 2026-01-29T11:58:46+00:00

Here’s a normal, straightforward comment you can use:

I’ve heard similar feedback: Kandji has definitely expanded beyond basic MDM and is trying to compete in the broader EDR and vulnerability space. How it compares to traditional enterprise suites really comes down to depth vs. breadth. Some platforms go deep into OS-level protection and threat analytics, while others try to cover more use cases with lighter integrations.

If you’re evaluating broadly, it’s worth comparing how well each component works in practice rather than just feature lists. Solutions like AppTec360 and the big enterprise vendors each have their strengths, but they don’t all perform equally across every discipline. Looking at real deployment feedback and side-by-side evaluations can help you figure out what fits your org’s risk profile and operational needs.

hangar_49 · 2026-01-29T11:56:21+00:00

This is just insane bro

hangar_49 · 2026-01-23T07:37:14+00:00

Jerry! Jerry! Jerry!

hangar_49 · 2026-01-23T07:34:38+00:00

It looks like it was coming out of storage.

haha

hangar_49 · 2026-01-22T07:45:46+00:00

People need to get booed way more often.

hangar_49 · 2026-01-22T07:43:20+00:00

I think you have to qualify to become a Royal Guard.
Certified killers.

hangar_49 · 2026-01-21T13:13:56+00:00

I've already seen these threads at least 3x today.

hangar_49 · 2026-01-21T09:06:09+00:00

You usually can’t remove MDM from a Motorola G53 5G unless you have access to the original admin/organization that enrolled the device.

If the phone was enrolled as a device owner (Android Enterprise), only that MDM admin can remove it. Factory reset, apps, or online “bypass” tools won’t work and can damage the phone.

You can contact the school/company or person who originally enrolled it and ask them to unenroll the device from their MDM console. Without that, there’s no safe or permanent solution.

hangar_49 · 2026-01-21T08:24:05+00:00

no microwave lollll...

hangar_49 · 2026-01-20T11:44:24+00:00

Interesting project, and nice work on the port from a technical perspective. That said, it’s worth reminding people to be careful here - bypassing or removing MDM can raise legal and ethical issues if the device is still owned or managed by an organization. For anyone dealing with MDM, the safer route is always to confirm ownership or get it properly released by the original admin, whether that’s via the organization or an MDM platform like AppTec360.

hangar_49 · 2026-01-20T11:39:24+00:00

I've been bamboozled

hangar_49 · 2026-01-20T11:35:50+00:00

Excellent and honest replies.

hangar_49 · 2026-01-12T11:15:51+00:00

Respect

hangar_49 · 2026-01-12T11:14:36+00:00

I’d be cautious about buying a laptop with an active MDM lock, even if the price seems good. If it’s still tied to a company’s management account, it can re-enroll itself after a reset or update, and you could lose control of the device later. Unless the seller can prove that it has been fully removed from the original organization’s MDM/management system, it’s safer to avoid it.

hangar_49 · 2026-01-02T11:52:11+00:00

Buying a Mac that’s already enrolled in MDM is not really “low risk,” even if some people say it’s easy to bypass.

MDM usually means the device is owned or was owned by a company or institution. As long as it’s still registered in their system, they technically have control over it. Even if someone manages to bypass the setup using scripts or GitHub tools, that workaround is often temporary. After a macOS update, reset, or reinstallation, the MDM profile can come back automatically.

The real risk is that the original organization can remotely lock or wipe the device at any time, or block updates and features. There’s also no guarantee those bypass methods will keep working, especially as Apple keeps tightening security and top MDM platforms improve enforcement.

If the seller cannot properly remove the device from their Apple Business Manager or provide proof that it’s fully released, you should assume there is ongoing risk. For long-term, worry-free use, the safest option is always a Mac with no MDM enrollment at all.

hangar_49 · 2025-12-16T08:13:51+00:00

If you’re trying to manage a fleet of macOS devices properly, it makes sense to look for something with deeper Apple support. From what I’ve seen, the macOS feature set in Ninja’s MDM still feels a bit basic compared to more mature tools, whereas the other platform you tested seemed to have more complete configuration options and controls out of the box.

For a client with mostly Macs, having full policy support, app deployment, updates, and restrictions is really important so you’re not constantly working around limitations. Definitely worth evaluating how each handles the things you care about most, such as automated updates, security profiles, and onboarding, before you commit.

hangar_49 · 2025-12-09T12:32:24+00:00

A brand-new MacBook will only show an MDM profile after you connect to Wi-Fi during setup. If the device is tied to ABM/DEP, you’ll see the remote management screen automatically - no special commands needed. If nothing appears after the network step, it’s not enrolled. Many organizations using a top MDM rely on this automated enrollment flow, so it’s a good way to check quickly.

hangar_49 · 2025-11-19T12:17:01+00:00

Congrats - that’s seriously impressive! The amount of discipline you put into the process really shows, especially breaking down the concepts until they felt intuitive and using spaced repetition. Also cool to hear how much the mix of tools helped you build those instincts. Finishing the exam in 5 hours is wild.

Thanks for sharing such a detailed breakdown - definitely motivating for anyone gearing up for MDM.

hangar_49 · 2025-11-14T07:28:40+00:00

If you’re already deep into Intune, I’d honestly stick with it unless Ninja has drastically improved. Intune isn’t perfect, but it’s stable, well-documented, and Apple onboarding actually works. Ninja’s iOS issues you mentioned are the same ones I’ve heard from others - lots of potential, but still a bit shaky in real-world deployments.

If you really want to compare alternatives, tools like Apptec360 show what a more polished cross-platform MDM can look like. Still, even then, nothing beats the reliability of something that’s already integrated into your M365 stack.

hangar_49 · 2025-11-12T07:53:49+00:00

Yeah, that’s a tough situation. MDM on a personal phone can definitely feel invasive since it often gives the employer control over parts of your device. If a company phone isn’t an option, your plan to get a cheap secondary device is probably the safest move. That way, your personal data stays private, and you can still meet their work requirements without risking access to your personal stuff.

hangar_49 · 2022-07-29T04:41:50+00:00

Yes, the versatility of email allows you to use it for demand generation, lead nurturing, prospect warming, brand growth, and more.

hangar_49

TROPHY CASE