[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"mdc--f73t4y-key":3},{"data":4,"body":5},{},{"type":6,"children":7},"root",[8,14,22,28,33,174,181,186,195,240,254,258,264,278,284,289,295,300,314,320,334,338,344,349,354,360,365,376,381,395,401,406,412,417,422,427,433,438,443,475,481,489,513,518,532,554,559,630,633,639,644,649,655,660,666,671,708,712,718,723,729,737,766,772,778,786,836,842,1011,1059,1065,1070,1080,1088,1137,1142,1165,1170,1174,1180,1185,1193,1222,1227,1260,1266,1358,1363,1369,1374,1382,1450,1463,1467,1473,1478,1486,1571,1585],{"type":9,"tag":10,"props":11,"children":13},"element","blog-eyebrow",{"label":12},"Mobile Device Management",[],{"type":9,"tag":15,"props":16,"children":18},"h2",{"id":17},"what-is-an-mdm",[19],{"type":20,"value":21},"text","What is an MDM?",{"type":9,"tag":23,"props":24,"children":25},"p",{},[26],{"type":20,"value":27},"MDM stands for mobile device management. Despite the name, it manages Macs just as well as iPhones and iPads. An Apple MDM applies the company’s rules to its whole fleet, remotely: settings, apps, encryption, updates.",{"type":9,"tag":23,"props":29,"children":30},{},[31],{"type":20,"value":32},"The MDM relies on the management framework Apple builds into macOS, iOS and iPadOS. It sends each device configuration profiles and commands, which the device applies by itself. The rules are defined once, then hold for the whole fleet.",{"type":9,"tag":34,"props":35,"children":36},"table",{},[37,61],{"type":9,"tag":38,"props":39,"children":40},"thead",{},[41],{"type":9,"tag":42,"props":43,"children":44},"tr",{},[45,51,56],{"type":9,"tag":46,"props":47,"children":48},"th",{},[49],{"type":20,"value":50},"Area",{"type":9,"tag":46,"props":52,"children":53},{},[54],{"type":20,"value":55},"Without an MDM",{"type":9,"tag":46,"props":57,"children":58},{},[59],{"type":20,"value":60},"With an MDM",{"type":9,"tag":62,"props":63,"children":64},"tbody",{},[65,84,102,120,138,156],{"type":9,"tag":42,"props":66,"children":67},{},[68,74,79],{"type":9,"tag":69,"props":70,"children":71},"td",{},[72],{"type":20,"value":73},"Configuration",{"type":9,"tag":69,"props":75,"children":76},{},[77],{"type":20,"value":78},"Each device is set up by hand",{"type":9,"tag":69,"props":80,"children":81},{},[82],{"type":20,"value":83},"The same rules apply to the whole fleet",{"type":9,"tag":42,"props":85,"children":86},{},[87,92,97],{"type":9,"tag":69,"props":88,"children":89},{},[90],{"type":20,"value":91},"Security",{"type":9,"tag":69,"props":93,"children":94},{},[95],{"type":20,"value":96},"Encryption depends on each user",{"type":9,"tag":69,"props":98,"children":99},{},[100],{"type":20,"value":101},"Encryption is enforced and checked",{"type":9,"tag":42,"props":103,"children":104},{},[105,110,115],{"type":9,"tag":69,"props":106,"children":107},{},[108],{"type":20,"value":109},"Inventory",{"type":9,"tag":69,"props":111,"children":112},{},[113],{"type":20,"value":114},"A spreadsheet that is rarely up to date",{"type":9,"tag":69,"props":116,"children":117},{},[118],{"type":20,"value":119},"An inventory kept automatically",{"type":9,"tag":42,"props":121,"children":122},{},[123,128,133],{"type":9,"tag":69,"props":124,"children":125},{},[126],{"type":20,"value":127},"Updates",{"type":9,"tag":69,"props":129,"children":130},{},[131],{"type":20,"value":132},"Installed when the user thinks of it",{"type":9,"tag":69,"props":134,"children":135},{},[136],{"type":20,"value":137},"Scheduled, with a deadline",{"type":9,"tag":42,"props":139,"children":140},{},[141,146,151],{"type":9,"tag":69,"props":142,"children":143},{},[144],{"type":20,"value":145},"Arrivals and departures",{"type":9,"tag":69,"props":147,"children":148},{},[149],{"type":20,"value":150},"Prepared case by case",{"type":9,"tag":69,"props":152,"children":153},{},[154],{"type":20,"value":155},"A device ready out of the box, then reassigned",{"type":9,"tag":42,"props":157,"children":158},{},[159,164,169],{"type":9,"tag":69,"props":160,"children":161},{},[162],{"type":20,"value":163},"Loss or theft",{"type":9,"tag":69,"props":165,"children":166},{},[167],{"type":20,"value":168},"Encryption status remains uncertain",{"type":9,"tag":69,"props":170,"children":171},{},[172],{"type":20,"value":173},"Remote lock or erase",{"type":9,"tag":175,"props":176,"children":178},"h3",{"id":177},"from-how-many-devices",[179],{"type":20,"value":180},"From how many devices?",{"type":9,"tag":23,"props":182,"children":183},{},[184],{"type":20,"value":185},"We put the threshold at ten devices, or at the opening of a second site. From there, the time saved justifies an MDM. A smaller fleet can need one earlier, especially when one person looks after it on top of their job.",{"type":9,"tag":23,"props":187,"children":188},{},[189],{"type":9,"tag":190,"props":191,"children":192},"strong",{},[193],{"type":20,"value":194},"These situations show that an Apple fleet needs an MDM:",{"type":9,"tag":196,"props":197,"children":198},"ul",{},[199,214,227],{"type":9,"tag":200,"props":201,"children":202},"li",{},[203,208,212],{"type":9,"tag":190,"props":204,"children":205},{},[206],{"type":20,"value":207},"A departure that locks a device",{"type":9,"tag":209,"props":210,"children":211},"br",{},[],{"type":20,"value":213},"\nThe returned MacBook stays tied to the employee’s personal Apple Account. Without their passcode, the company can neither erase it nor hand it to someone else.",{"type":9,"tag":200,"props":215,"children":216},{},[217,222,225],{"type":9,"tag":190,"props":218,"children":219},{},[220],{"type":20,"value":221},"An arrival that is not ready",{"type":9,"tag":209,"props":223,"children":224},{},[],{"type":20,"value":226},"\nThe new employee’s workstation is prepared by hand, often at the last minute. Their first days go on installations and access requests.",{"type":9,"tag":200,"props":228,"children":229},{},[230,235,238],{"type":9,"tag":190,"props":231,"children":232},{},[233],{"type":20,"value":234},"A lost device with no clear answer",{"type":9,"tag":209,"props":236,"children":237},{},[],{"type":20,"value":239},"\nAn iPhone or a Mac goes missing, and nobody knows whether it was encrypted. The company cannot say whether its clients’ data is exposed.",{"type":9,"tag":23,"props":241,"children":242},{},[243,245,252],{"type":20,"value":244},"The MDM is the central tool of ",{"type":9,"tag":246,"props":247,"children":249},"a",{"href":248},"\u002Fen\u002Fmanaged-it\u002Fapple",[250],{"type":20,"value":251},"Apple device management",{"type":20,"value":253},", without being the only one. It takes care of the devices, and written procedures cover the rest.",{"type":9,"tag":10,"props":255,"children":257},{"label":256},"Apple Business",[],{"type":9,"tag":15,"props":259,"children":261},{"id":260},"how-does-an-mdm-work-with-apple-business",[262],{"type":20,"value":263},"How does an MDM work with Apple Business?",{"type":9,"tag":23,"props":265,"children":266},{},[267,269,276],{"type":20,"value":268},"The MDM relies on ",{"type":9,"tag":246,"props":270,"children":274},{"href":271,"rel":272},"https:\u002F\u002Fwww.apple.com\u002Fnewsroom\u002F2026\u002F03\u002Fintroducing-apple-business-a-new-all-in-one-platform-for-businesses-of-all-sizes\u002F",[273],"nofollow",[275],{"type":20,"value":256},{"type":20,"value":277},", Apple’s free portal for businesses. Since April 2026, it replaces Apple Business Manager, Apple Business Essentials and Apple Business Connect.",{"type":9,"tag":175,"props":279,"children":281},{"id":280},"the-apple-business-account",[282],{"type":20,"value":283},"The Apple Business account",{"type":9,"tag":23,"props":285,"children":286},{},[287],{"type":20,"value":288},"The company opens an account there in its own name and enrols its devices. Each enrolled device is then assigned to the MDM, which takes charge of it from the first start-up. The account and the devices thus remain the company’s property, whichever MDM it chooses.",{"type":9,"tag":175,"props":290,"children":292},{"id":291},"supervision-and-mdm-lock",[293],{"type":20,"value":294},"Supervision and MDM lock",{"type":9,"tag":23,"props":296,"children":297},{},[298],{"type":20,"value":299},"A device enrolled through Apple Business is \"supervised\". The MDM takes over from the first start-up and can prevent the user from removing management. This is sometimes called an MDM lock.",{"type":9,"tag":23,"props":301,"children":302},{},[303,305,312],{"type":20,"value":304},"An iPhone or a Mac enrolled by hand, outside Apple Business, lets the user remove management from its settings instead. The ",{"type":9,"tag":246,"props":306,"children":309},{"href":307,"rel":308},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fdeployment\u002Fdep08f54fcf6\u002Fweb",[273],[310],{"type":20,"value":311},"enrolment methods",{"type":20,"value":313}," therefore do not all offer the same control.",{"type":9,"tag":175,"props":315,"children":317},{"id":316},"managed-apple-accounts",[318],{"type":20,"value":319},"Managed Apple Accounts",{"type":9,"tag":23,"props":321,"children":322},{},[323,325,332],{"type":20,"value":324},"Managed Apple Accounts are created in Apple Business and belong to the company. They are not needed to manage the devices: they serve, for example, to enrol a personal device or to share an iPad. If the company turns on ",{"type":9,"tag":246,"props":326,"children":329},{"href":327,"rel":328},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fbusiness\u002Faxm512ce43c3\u002Fweb",[273],[330],{"type":20,"value":331},"domain capture",{"type":20,"value":333},", a choice that cannot be undone, the holders of Apple Accounts opened with an address on that domain have thirty days to transfer them to the organisation or change their address. Without an answer, the account stays personal and changes address.",{"type":9,"tag":10,"props":335,"children":337},{"label":336},"Day to day",[],{"type":9,"tag":15,"props":339,"children":341},{"id":340},"what-the-mdm-automates-in-an-apple-fleet",[342],{"type":20,"value":343},"What the MDM automates in an Apple fleet",{"type":9,"tag":23,"props":345,"children":346},{},[347],{"type":20,"value":348},"Every arrival means preparing a workstation and installing the apps. Every departure means recovering the device and preparing it for the next employee. Without an MDM, these tasks fall to the managing director or a team lead, and a forgotten step leaves an account open or a device locked.",{"type":9,"tag":23,"props":350,"children":351},{},[352],{"type":20,"value":353},"With an MDM, they are done the same way every time, and remotely. If the person who looks after the fleet is away, someone else can take over.",{"type":9,"tag":175,"props":355,"children":357},{"id":356},"a-mac-ready-out-of-the-box",[358],{"type":20,"value":359},"A Mac ready out of the box",{"type":9,"tag":23,"props":361,"children":362},{},[363],{"type":20,"value":364},"The new Mac is delivered straight to the office, or to the employee’s home. They unpack it, choose the Wi-Fi network and sign in with their work credentials. Settings, apps and email then install by themselves. The workstation is ready after a few on-screen steps.",{"type":9,"tag":23,"props":366,"children":367},{},[368],{"type":9,"tag":369,"props":370,"children":375},"img",{"alt":371,"height":372,"src":373,"width":374},"A new MacBook Air next to its box shows the \"hello\" screen of first start-up",725,"https:\u002F\u002Fassets.avepto.ch\u002F7a26c602-1b22-4a5f-b2ec-cbca640002db.webp",1280,[],{"type":9,"tag":23,"props":377,"children":378},{},[379],{"type":20,"value":380},"This zero-touch deployment requires the device to be enrolled in Apple Business at purchase. The company, or its provider, gives its organisation ID to the reseller and adds that reseller’s number in Apple Business: the reseller can then link the device to the company at the point of sale.",{"type":9,"tag":23,"props":382,"children":383},{},[384,386,393],{"type":20,"value":385},"We work, for example, with Data Quest, an Apple Authorised Reseller. Other resellers, such as Bechtle, Brack or Digitec Galaxus, offer the same service: Apple publishes the ",{"type":9,"tag":246,"props":387,"children":390},{"href":388,"rel":389},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F118206",[273],[391],{"type":20,"value":392},"list",{"type":20,"value":394},".",{"type":9,"tag":175,"props":396,"children":398},{"id":397},"apps-and-settings",[399],{"type":20,"value":400},"Apps and settings",{"type":9,"tag":23,"props":402,"children":403},{},[404],{"type":20,"value":405},"Apps are deployed from the console, with their licences: office suite, business software, VPN, antivirus. Settings follow the same path: Wi-Fi network, printers, security rules, restrictions. A change decided once applies to the whole fleet, or to a group of devices. There is no longer any need to go from one machine to the next.",{"type":9,"tag":175,"props":407,"children":409},{"id":408},"scheduled-updates",[410],{"type":20,"value":411},"Scheduled updates",{"type":9,"tag":23,"props":413,"children":414},{},[415],{"type":20,"value":416},"Apple ships security fixes several times a year, and a new major version of macOS and iOS every autumn. If updates depend on each user, part of the fleet stays exposed to flaws that are already fixed.",{"type":9,"tag":23,"props":418,"children":419},{},[420],{"type":20,"value":421},"The MDM sets a deadline for each new system version. Before the deadline, the employee picks their moment, then the update installs by itself. The whole fleet moves at the same pace, and the console flags the devices that are behind.",{"type":9,"tag":23,"props":423,"children":424},{},[425],{"type":20,"value":426},"At Avepto, security updates are applied within 48 hours. Every new major version is first tested on a few devices, with the client’s business software, then rolled out to the rest of the fleet. Employees are spared bad surprises the morning after an update.",{"type":9,"tag":175,"props":428,"children":430},{"id":429},"fleet-inventory",[431],{"type":20,"value":432},"Fleet inventory",{"type":9,"tag":23,"props":434,"children":435},{},[436],{"type":20,"value":437},"The MDM keeps the inventory up to date by itself: model, user, system version, encryption status. Every device receives the same baseline configuration, which narrows the gaps between machines. A device that drifts from the rules shows up in the console before it becomes an incident.",{"type":9,"tag":23,"props":439,"children":440},{},[441],{"type":20,"value":442},"The inventory also shows the age of every device and spots those that will get no new system version.",{"type":9,"tag":444,"props":445,"children":450},"blog-callout",{"variant":446,"cta":447,"source":448,"title":449},"action","Review your Intel Macs","intel-macs","Plan the replacement of your Intel Macs",[451,456],{"type":9,"tag":23,"props":452,"children":453},{},[454],{"type":20,"value":455},"They will get no new version of macOS. We find them in your fleet and spread their replacement to fit your budget.",{"type":9,"tag":457,"props":458,"children":460},"template",{"v-slot:note":459},"",[461],{"type":9,"tag":23,"props":462,"children":463},{},[464,466,473],{"type":20,"value":465},"The question already arises: Apple has ",{"type":9,"tag":246,"props":467,"children":470},{"href":468,"rel":469},"https:\u002F\u002Fdeveloper.apple.com\u002Fvideos\u002Fplay\u002Fwwdc2025\u002F102\u002F",[273],[471],{"type":20,"value":472},"announced",{"type":20,"value":474}," that macOS Tahoe will be the final release for Intel Macs, and macOS 27 only installs on Macs with Apple silicon.",{"type":9,"tag":175,"props":476,"children":478},{"id":477},"departure-and-activation-lock",[479],{"type":20,"value":480},"Departure and Activation Lock",{"type":9,"tag":23,"props":482,"children":483},{},[484],{"type":9,"tag":190,"props":485,"children":486},{},[487],{"type":20,"value":488},"With the MDM, a departure follows four steps, without depending on the person who is leaving:",{"type":9,"tag":490,"props":491,"children":492},"ol",{},[493,498,503,508],{"type":9,"tag":200,"props":494,"children":495},{},[496],{"type":20,"value":497},"Access to their work device is blocked on their last day.",{"type":9,"tag":200,"props":499,"children":500},{},[501],{"type":20,"value":502},"Their work data stays in the company’s tools.",{"type":9,"tag":200,"props":504,"children":505},{},[506],{"type":20,"value":507},"Their user account is removed from the device, and a new one is created for the next employee.",{"type":9,"tag":200,"props":509,"children":510},{},[511],{"type":20,"value":512},"The Mac or iPhone is reassigned to the next employee, who receives it ready to use.",{"type":9,"tag":23,"props":514,"children":515},{},[516],{"type":20,"value":517},"Disabling their Microsoft 365 account, their email and other services are separate actions, to be planned in the same procedure.",{"type":9,"tag":23,"props":519,"children":520},{},[521,523,530],{"type":20,"value":522},"The employee may have signed in to their work Mac or iPhone with their personal Apple Account. On a device enrolled in Apple Business and supervised by the MDM, that account does not turn on ",{"type":9,"tag":246,"props":524,"children":527},{"href":525,"rel":526},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fdeployment\u002Fdepf4ab94ef1\u002Fweb",[273],[528],{"type":20,"value":529},"Activation Lock",{"type":20,"value":531}," unless the MDM allows it. The right setting: the MDM allows only the company’s lock, linked to the organisation.",{"type":9,"tag":23,"props":533,"children":534},{},[535,537,544,546,553],{"type":20,"value":536},"The risk lies with devices left outside Apple Business: their lock follows the employee’s personal account. Recovering them takes the employee’s password, or a ",{"type":9,"tag":246,"props":538,"children":541},{"href":539,"rel":540},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002F108934",[273],[542],{"type":20,"value":543},"request to Apple",{"type":20,"value":545}," with the proof of purchase. A device added to Apple Business before the lock was turned on also lets the company ",{"type":9,"tag":246,"props":547,"children":550},{"href":548,"rel":549},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fbusiness\u002Faxm812df1dd8\u002Fweb",[273],[551],{"type":20,"value":552},"turn it off itself",{"type":20,"value":394},{"type":9,"tag":23,"props":555,"children":556},{},[557],{"type":20,"value":558},"At the end of a lease or before a resale, the order matters. Turn off the company’s lock, erase the device, then release it from Apple Business. Once a device is released, its Activation Lock can no longer be managed from Apple Business.",{"type":9,"tag":444,"props":560,"children":564},{"variant":561,"label":562,"icon":563},"reference","Beyond the MDM","i-ph-stack",[565,570,625],{"type":9,"tag":23,"props":566,"children":567},{},[568],{"type":20,"value":569},"The MDM configures and secures the devices, but it does not manage everything. Complete fleet management combines several tools, each in its role:",{"type":9,"tag":196,"props":571,"children":572},{},[573,586,599,612],{"type":9,"tag":200,"props":574,"children":575},{},[576,581,584],{"type":9,"tag":190,"props":577,"children":578},{},[579],{"type":20,"value":580},"Device configuration",{"type":9,"tag":209,"props":582,"children":583},{},[],{"type":20,"value":585},"\nSettings, apps, encryption and updates, through the MDM.",{"type":9,"tag":200,"props":587,"children":588},{},[589,594,597],{"type":9,"tag":190,"props":590,"children":591},{},[592],{"type":20,"value":593},"Workstation monitoring",{"type":9,"tag":209,"props":595,"children":596},{},[],{"type":20,"value":598},"\nA remote monitoring tool (RMM) flags a full disk, a failed backup or a machine gone offline.",{"type":9,"tag":200,"props":600,"children":601},{},[602,607,610],{"type":9,"tag":190,"props":603,"children":604},{},[605],{"type":20,"value":606},"User sessions on Macs",{"type":9,"tag":209,"props":608,"children":609},{},[],{"type":20,"value":611},"\nCreated and removed by scripts suited to each arrival and departure.",{"type":9,"tag":200,"props":613,"children":614},{},[615,620,623],{"type":9,"tag":190,"props":616,"children":617},{},[618],{"type":20,"value":619},"Accounts and access to services",{"type":9,"tag":209,"props":621,"children":622},{},[],{"type":20,"value":624},"\nMicrosoft 365, email and business apps, managed in the company’s directory.",{"type":9,"tag":23,"props":626,"children":627},{},[628],{"type":20,"value":629},"Written procedures tie these tools together. That combination is what Avepto puts in place, to manage the fleet and each employee’s access precisely.",{"type":9,"tag":10,"props":631,"children":632},{"label":91},[],{"type":9,"tag":15,"props":634,"children":636},{"id":635},"securing-an-apple-fleet-with-an-mdm",[637],{"type":20,"value":638},"Securing an Apple fleet with an MDM",{"type":9,"tag":23,"props":640,"children":641},{},[642],{"type":20,"value":643},"A MacBook left on a train or stolen from a car holds the email, client documents and access to the company’s tools. What happens next depends on the rules the MDM was already applying.",{"type":9,"tag":23,"props":645,"children":646},{},[647],{"type":20,"value":648},"Which Macs are encrypted? Where are their recovery keys? Without an MDM, these questions often go unanswered. The company then cannot say whether the data on a lost or stolen device is exposed.",{"type":9,"tag":175,"props":650,"children":652},{"id":651},"filevault-encryption",[653],{"type":20,"value":654},"FileVault encryption",{"type":9,"tag":23,"props":656,"children":657},{},[658],{"type":20,"value":659},"Without FileVault encryption, the login password is not enough to protect a Mac’s data. With encryption enforced by the MDM, the disk stays unreadable without the key. That recovery key is kept by the company, not by the employee. On iPhone and iPad, the MDM enforces a passcode, which turns on data protection.",{"type":9,"tag":175,"props":661,"children":663},{"id":662},"remote-lock-and-erase",[664],{"type":20,"value":665},"Remote lock and erase",{"type":9,"tag":23,"props":667,"children":668},{},[669],{"type":20,"value":670},"As soon as a lost or stolen device reconnects, the MDM can lock or erase it remotely. Activation Lock, linked to the organisation, then prevents it from being reactivated without the company’s consent. The console keeps a record of each action, which helps document the incident.",{"type":9,"tag":444,"props":672,"children":674},{"variant":561,"label":673},"Legal framework",[675,681,694],{"type":9,"tag":175,"props":676,"children":678},{"id":677},"what-the-revfadp-requires",[679],{"type":20,"value":680},"What the revFADP requires",{"type":9,"tag":23,"props":682,"children":683},{},[684,686,693],{"type":20,"value":685},"The revFADP requires data security breaches that present a high risk to be reported to the Federal Data Protection and Information Commissioner (FDPIC). The FDPIC received 484 reports in 2025\u002F2026, against 363 the year before, according to its ",{"type":9,"tag":246,"props":687,"children":690},{"href":688,"rel":689},"https:\u002F\u002Fwww.edoeb.admin.ch\u002Fdam\u002Fen\u002Fsd-web\u002FZgZZm5CLxIFF\u002F33_T%C3%A4tigkeitsbericht%202025-2026%20EN_Web.pdf",[273],[691],{"type":20,"value":692},"annual report",{"type":20,"value":394},{"type":9,"tag":23,"props":695,"children":696},{},[697,699,706],{"type":20,"value":698},"According to its ",{"type":9,"tag":246,"props":700,"children":703},{"href":701,"rel":702},"https:\u002F\u002Fwww.edoeb.admin.ch\u002Fdam\u002Fen\u002Fsd-web\u002FT64CAUyvAMcF\u002F1_2%20Leitfaden%20des%20ED%C3%96B%20betreffend%20die%20Meldung%20von%20Datensicherheitsverletzungen%20und%20Information%20der%20Betroffenen%20nach%20Art.%2024%20DSG_EN.pdf",[273],[704],{"type":20,"value":705},"guide on breach reporting",{"type":20,"value":707},", the loss of effectively encrypted data does not, as a rule, have to be reported. Encryption checked by the MDM is the condition.",{"type":9,"tag":10,"props":709,"children":711},{"label":710},"Choosing an MDM",[],{"type":9,"tag":15,"props":713,"children":715},{"id":714},"which-apple-mdm-to-choose-comparison-and-prices",[716],{"type":20,"value":717},"Which Apple MDM to choose? Comparison and prices",{"type":9,"tag":23,"props":719,"children":720},{},[721],{"type":20,"value":722},"The best MDM is the one that fits the fleet and the tools already in place. The choice depends mainly on three things: Windows PCs in the fleet, the Microsoft 365 subscription and the need for proof.",{"type":9,"tag":175,"props":724,"children":726},{"id":725},"specialist-or-cross-platform",[727],{"type":20,"value":728},"Specialist or cross-platform",{"type":9,"tag":23,"props":730,"children":731},{},[732],{"type":9,"tag":190,"props":733,"children":734},{},[735],{"type":20,"value":736},"The tools on the market fall into two families:",{"type":9,"tag":490,"props":738,"children":739},{},[740,753],{"type":9,"tag":200,"props":741,"children":742},{},[743,748,751],{"type":9,"tag":190,"props":744,"children":745},{},[746],{"type":20,"value":747},"Apple specialists",{"type":9,"tag":209,"props":749,"children":750},{},[],{"type":20,"value":752},"\nJamf, Mosyle and Iru (formerly Kandji) are built for Apple devices. They follow every macOS and iOS release closely.",{"type":9,"tag":200,"props":754,"children":755},{},[756,761,764],{"type":9,"tag":190,"props":757,"children":758},{},[759],{"type":20,"value":760},"Cross-platform tools",{"type":9,"tag":209,"props":762,"children":763},{},[],{"type":20,"value":765},"\nMicrosoft Intune, Omnissa Workspace ONE, JumpCloud and Hexnode also manage Windows and Android, from a single console.",{"type":9,"tag":767,"props":768,"children":771},"blog-logo-grid",{"labels":769,"logos":770},"Apple specialists|Cross-platform","jamf,mosyle,iru,applebusiness|intune,omnissa,jumpcloud,hexnode",[],{"type":9,"tag":175,"props":773,"children":775},{"id":774},"three-selection-criteria",[776],{"type":20,"value":777},"Three selection criteria",{"type":9,"tag":23,"props":779,"children":780},{},[781],{"type":9,"tag":190,"props":782,"children":783},{},[784],{"type":20,"value":785},"Three things guide the choice:",{"type":9,"tag":490,"props":787,"children":788},{},[789,802,823],{"type":9,"tag":200,"props":790,"children":791},{},[792,797,800],{"type":9,"tag":190,"props":793,"children":794},{},[795],{"type":20,"value":796},"Windows PCs in the fleet",{"type":9,"tag":209,"props":798,"children":799},{},[],{"type":20,"value":801},"\nA single console for Macs and PCs looks simpler, but it often follows the Macs less closely. Many companies manage their PCs with Intune and their Macs with a specialised tool, each doing what it does best.",{"type":9,"tag":200,"props":803,"children":804},{},[805,810,813,815,821],{"type":9,"tag":190,"props":806,"children":807},{},[808],{"type":20,"value":809},"A Microsoft 365 Business Premium subscription",{"type":9,"tag":209,"props":811,"children":812},{},[],{"type":20,"value":814},"\nIt includes Intune, but also other ",{"type":9,"tag":246,"props":816,"children":818},{"href":817},"\u002Fen\u002Fproductivity\u002Fmicrosoft-365",[819],{"type":20,"value":820},"Microsoft 365",{"type":20,"value":822}," services, security among them. That is an asset for the PCs, without being on its own a reason to manage the Macs with Intune.",{"type":9,"tag":200,"props":824,"children":825},{},[826,831,834],{"type":9,"tag":190,"props":827,"children":828},{},[829],{"type":20,"value":830},"Proof of encryption required",{"type":9,"tag":209,"props":832,"children":833},{},[],{"type":20,"value":835},"\nA client or an insurer may ask for it. Check that the MDM can extract the encryption status of every device.",{"type":9,"tag":175,"props":837,"children":839},{"id":838},"mdm-prices-compared",[840],{"type":20,"value":841},"MDM prices compared",{"type":9,"tag":34,"props":843,"children":844},{},[845,866],{"type":9,"tag":38,"props":846,"children":847},{},[848],{"type":9,"tag":42,"props":849,"children":850},{},[851,856,861],{"type":9,"tag":46,"props":852,"children":853},{},[854],{"type":20,"value":855},"Tool",{"type":9,"tag":46,"props":857,"children":858},{},[859],{"type":20,"value":860},"Published price, per month",{"type":9,"tag":46,"props":862,"children":863},{},[864],{"type":20,"value":865},"Worth knowing",{"type":9,"tag":62,"props":867,"children":868},{},[869,886,904,922,939,957,975,993],{"type":9,"tag":42,"props":870,"children":871},{},[872,876,881],{"type":9,"tag":69,"props":873,"children":874},{},[875],{"type":20,"value":256},{"type":9,"tag":69,"props":877,"children":878},{},[879],{"type":20,"value":880},"Free",{"type":9,"tag":69,"props":882,"children":883},{},[884],{"type":20,"value":885},"Apple’s built-in tool, no direct migration to another MDM",{"type":9,"tag":42,"props":887,"children":888},{},[889,894,899],{"type":9,"tag":69,"props":890,"children":891},{},[892],{"type":20,"value":893},"Mosyle",{"type":9,"tag":69,"props":895,"children":896},{},[897],{"type":20,"value":898},"Free up to 30 devices, then about CHF 0.85 per device",{"type":9,"tag":69,"props":900,"children":901},{},[902],{"type":20,"value":903},"Full plan for Macs: about CHF 2.50",{"type":9,"tag":42,"props":905,"children":906},{},[907,912,917],{"type":9,"tag":69,"props":908,"children":909},{},[910],{"type":20,"value":911},"Jamf",{"type":9,"tag":69,"props":913,"children":914},{},[915],{"type":20,"value":916},"On quote",{"type":9,"tag":69,"props":918,"children":919},{},[920],{"type":20,"value":921},"Jamf Now free for up to 3 devices",{"type":9,"tag":42,"props":923,"children":924},{},[925,930,934],{"type":9,"tag":69,"props":926,"children":927},{},[928],{"type":20,"value":929},"Iru (formerly Kandji)",{"type":9,"tag":69,"props":931,"children":932},{},[933],{"type":20,"value":916},{"type":9,"tag":69,"props":935,"children":936},{},[937],{"type":20,"value":938},"Annual commitment",{"type":9,"tag":42,"props":940,"children":941},{},[942,947,952],{"type":9,"tag":69,"props":943,"children":944},{},[945],{"type":20,"value":946},"Microsoft Intune",{"type":9,"tag":69,"props":948,"children":949},{},[950],{"type":20,"value":951},"About CHF 6.60 per user",{"type":9,"tag":69,"props":953,"children":954},{},[955],{"type":20,"value":956},"Included in Microsoft 365 Business Premium",{"type":9,"tag":42,"props":958,"children":959},{},[960,965,970],{"type":9,"tag":69,"props":961,"children":962},{},[963],{"type":20,"value":964},"Omnissa Workspace ONE",{"type":9,"tag":69,"props":966,"children":967},{},[968],{"type":20,"value":969},"From about CHF 3.30 per device",{"type":9,"tag":69,"props":971,"children":972},{},[973],{"type":20,"value":974},"Billed annually in advance",{"type":9,"tag":42,"props":976,"children":977},{},[978,983,988],{"type":9,"tag":69,"props":979,"children":980},{},[981],{"type":20,"value":982},"JumpCloud",{"type":9,"tag":69,"props":984,"children":985},{},[986],{"type":20,"value":987},"From about CHF 4.15 per user",{"type":9,"tag":69,"props":989,"children":990},{},[991],{"type":20,"value":992},"Also manages employee identities",{"type":9,"tag":42,"props":994,"children":995},{},[996,1001,1006],{"type":9,"tag":69,"props":997,"children":998},{},[999],{"type":20,"value":1000},"Hexnode",{"type":9,"tag":69,"props":1002,"children":1003},{},[1004],{"type":20,"value":1005},"From about CHF 1.80 per device",{"type":9,"tag":69,"props":1007,"children":1008},{},[1009],{"type":20,"value":1010},"Three plans, up to about CHF 3.90",{"type":9,"tag":23,"props":1012,"children":1013},{},[1014],{"type":9,"tag":1015,"props":1016,"children":1017},"em",{},[1018,1020,1026,1028,1035,1036,1043,1044,1050,1052,1058],{"type":20,"value":1019},"Public prices checked in October 2026, converted to Swiss francs and rounded. They vary with the plan, the number of devices and the length of commitment. Sources: the pricing pages of ",{"type":9,"tag":246,"props":1021,"children":1024},{"href":1022,"rel":1023},"https:\u002F\u002Fbusiness.mosyle.com\u002Fpricing",[273],[1025],{"type":20,"value":893},{"type":20,"value":1027},", ",{"type":9,"tag":246,"props":1029,"children":1032},{"href":1030,"rel":1031},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune-pricing",[273],[1033],{"type":20,"value":1034},"Microsoft",{"type":20,"value":1027},{"type":9,"tag":246,"props":1037,"children":1040},{"href":1038,"rel":1039},"https:\u002F\u002Fwww.omnissa.com\u002Fworkspace-one-editions\u002F",[273],[1041],{"type":20,"value":1042},"Omnissa",{"type":20,"value":1027},{"type":9,"tag":246,"props":1045,"children":1048},{"href":1046,"rel":1047},"https:\u002F\u002Fjumpcloud.com\u002Fpricing",[273],[1049],{"type":20,"value":982},{"type":20,"value":1051}," and ",{"type":9,"tag":246,"props":1053,"children":1056},{"href":1054,"rel":1055},"https:\u002F\u002Fwww.hexnode.com\u002Fmobile-device-management\u002Fpricing\u002F",[273],[1057],{"type":20,"value":1000},{"type":20,"value":394},{"type":9,"tag":175,"props":1060,"children":1062},{"id":1061},"is-there-a-free-apple-mdm",[1063],{"type":20,"value":1064},"Is there a free Apple MDM?",{"type":9,"tag":23,"props":1066,"children":1067},{},[1068],{"type":20,"value":1069},"Yes, there are several. The management tool built into Apple Business is free. Mosyle offers a free plan for up to 30 devices, and Jamf Now for up to 3 devices.",{"type":9,"tag":23,"props":1071,"children":1072},{},[1073],{"type":9,"tag":369,"props":1074,"children":1079},{"alt":1075,"height":1076,"src":1077,"width":1078},"An iPhone, an iPad, a MacBook Pro and an iMac side by side, the family of devices an MDM manages from a single console",503,"https:\u002F\u002Fassets.avepto.ch\u002Fb412bc1d-da8b-49f7-8870-6c23162511b9.webp",1080,[],{"type":9,"tag":23,"props":1081,"children":1082},{},[1083],{"type":9,"tag":190,"props":1084,"children":1085},{},[1086],{"type":20,"value":1087},"Apple Business’s free tool covers the basic needs:",{"type":9,"tag":196,"props":1089,"children":1090},{},[1091,1113,1125],{"type":9,"tag":200,"props":1092,"children":1093},{},[1094,1099,1102,1104,1111],{"type":9,"tag":190,"props":1095,"children":1096},{},[1097],{"type":20,"value":1098},"Mac encryption",{"type":9,"tag":209,"props":1100,"children":1101},{},[],{"type":20,"value":1103},"\nApple Business turns on FileVault, ",{"type":9,"tag":246,"props":1105,"children":1108},{"href":1106,"rel":1107},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fbusiness\u002Faxm1dd824baf\u002Fweb",[273],[1109],{"type":20,"value":1110},"stores the recovery keys",{"type":20,"value":1112}," and shows, for each Mac, whether encryption is on.",{"type":9,"tag":200,"props":1114,"children":1115},{},[1116,1120,1123],{"type":9,"tag":190,"props":1117,"children":1118},{},[1119],{"type":20,"value":127},{"type":9,"tag":209,"props":1121,"children":1122},{},[],{"type":20,"value":1124},"\nApple Business sets a deadline for system updates.",{"type":9,"tag":200,"props":1126,"children":1127},{},[1128,1132,1135],{"type":9,"tag":190,"props":1129,"children":1130},{},[1131],{"type":20,"value":400},{"type":9,"tag":209,"props":1133,"children":1134},{},[],{"type":20,"value":1136},"\nApple Business installs apps and applies settings: Wi-Fi, VPN, passcode, firewall.",{"type":9,"tag":23,"props":1138,"children":1139},{},[1140],{"type":20,"value":1141},"The free tool’s limits show as the fleet grows. Apple’s documentation describes no compliance report for the whole fleet, which a client or an insurer sometimes asks for.",{"type":9,"tag":23,"props":1143,"children":1144},{},[1145,1147,1154,1156,1163],{"type":20,"value":1146},"Above all, Apple does not support ",{"type":9,"tag":246,"props":1148,"children":1151},{"href":1149,"rel":1150},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fbusiness\u002Faxm3a49a769d\u002Fweb",[273],[1152],{"type":20,"value":1153},"migrating devices",{"type":20,"value":1155}," from Apple Business’s free tool to another MDM. To change, every device must be unenrolled and enrolled again, which removes its settings and may remove its managed apps. Between two third-party MDMs, on the other hand, Apple has allowed devices bought through Apple Business to ",{"type":9,"tag":246,"props":1157,"children":1160},{"href":1158,"rel":1159},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fdeployment\u002Fdep4acb2aa44\u002Fweb",[273],[1161],{"type":20,"value":1162},"migrate without erasing",{"type":20,"value":1164}," since iOS 26 and macOS 26.",{"type":9,"tag":23,"props":1166,"children":1167},{},[1168],{"type":20,"value":1169},"Either way, free does not mean without cost, and available does not mean easy to put in place. Someone has to configure the tool, define the rules, follow the fleet and handle every arrival and departure. Choosing an MDM is within an SME’s reach. Deploying it properly and keeping it running over time is a profession.",{"type":9,"tag":10,"props":1171,"children":1173},{"label":1172},"Set-up",[],{"type":9,"tag":15,"props":1175,"children":1177},{"id":1176},"deploying-an-apple-mdm-in-house-or-with-a-provider",[1178],{"type":20,"value":1179},"Deploying an Apple MDM: in-house or with a provider",{"type":9,"tag":23,"props":1181,"children":1182},{},[1183],{"type":20,"value":1184},"The answer depends first on the size of the fleet: beyond ten devices, following up the MDM becomes a regular task. It also depends on how complex the environment is, with several sites, Windows PCs or client requirements.",{"type":9,"tag":23,"props":1186,"children":1187},{},[1188],{"type":9,"tag":190,"props":1189,"children":1190},{},[1191],{"type":20,"value":1192},"Two questions help decide:",{"type":9,"tag":490,"props":1194,"children":1195},{},[1196,1209],{"type":9,"tag":200,"props":1197,"children":1198},{},[1199,1204,1207],{"type":9,"tag":190,"props":1200,"children":1201},{},[1202],{"type":20,"value":1203},"How many hours a month does the company spend on IT?",{"type":9,"tag":209,"props":1205,"children":1206},{},[],{"type":20,"value":1208},"\nAdding up the time of the managing director and of every employee.",{"type":9,"tag":200,"props":1210,"children":1211},{},[1212,1217,1220],{"type":9,"tag":190,"props":1213,"children":1214},{},[1215],{"type":20,"value":1216},"Is one person designated to look after it?",{"type":9,"tag":209,"props":1218,"children":1219},{},[],{"type":20,"value":1221},"\nWith the time and skills it takes.",{"type":9,"tag":23,"props":1223,"children":1224},{},[1225],{"type":20,"value":1226},"When that time is scattered between several people, in-house management costs more than it seems.",{"type":9,"tag":1228,"props":1229,"children":1235},"blog-quiz",{":questions":1230,":results":1231,"id":1232,"note":1233,"title":1234},"[{\"type\":\"slider\",\"label\":\"How many Apple devices does your company use?\",\"description\":\"Count the Macs, iPhones and iPads, including those employees take home.\",\"min\":5,\"max\":20,\"value\":10,\"unit\":\"device|devices\",\"maxLabel\":\"20 or more\",\"bands\":[{\"min\":5,\"score\":0},{\"min\":10,\"score\":1},{\"min\":20,\"score\":2}]},{\"type\":\"choice\",\"label\":\"Who looks after the devices today?\",\"description\":\"The person who prepares workstations, manages access and responds when a device has a problem.\",\"columns\":2,\"options\":[{\"label\":\"A dedicated person\",\"score\":0},{\"label\":\"An employee on the side\",\"score\":3},{\"label\":\"The managing director\",\"score\":3},{\"label\":\"Nobody in particular\",\"score\":4}]},{\"type\":\"boolean\",\"label\":\"Does your company work across several sites?\",\"description\":\"A second office, a branch, or a team permanently based elsewhere.\",\"yes\":2,\"no\":0,\"yesTag\":\"Several sites\",\"noTag\":\"A single site\"},{\"type\":\"multiple\",\"label\":\"Which of these situations apply to your company?\",\"description\":\"Tick every one that applies, or none.\",\"columns\":2,\"options\":[{\"label\":\"Encryption proof required\",\"tag\":\"Proof of encryption\",\"score\":2},{\"label\":\"Regular hiring\",\"tag\":\"Regular hiring\",\"score\":1},{\"label\":\"Fast support expected\",\"tag\":\"Day-to-day support\",\"score\":1},{\"label\":\"Problems found too late\",\"tag\":\"Incidents suffered\",\"score\":1}]}]","[{\"id\":\"inhouse\",\"min\":0,\"title\":\"Running your MDM in-house\",\"cta\":{\"label\":\"See the seven steps\",\"to\":\"#setting-up-an-mdm-in-house\"}},{\"id\":\"setup\",\"min\":4,\"title\":\"In-house, with help for the set-up\",\"cta\":{\"label\":\"Prepare the set-up with us\"}},{\"id\":\"provider\",\"min\":7,\"title\":\"Handing your fleet to a provider\",\"cta\":{\"label\":\"Talk to Avepto about your fleet\"}}]","apple-interne-prestataire","A first pointer: the right choice also depends on your business software, your premises and your budget.","In-house or provider: who runs your MDM?",[1236,1244,1252],{"type":9,"tag":457,"props":1237,"children":1238},{"v-slot:inhouse":459},[1239],{"type":9,"tag":23,"props":1240,"children":1241},{},[1242],{"type":20,"value":1243},"Your fleet is within reach of in-house management. An MDM linked to Apple Business and written procedures are enough to start: the seven steps below detail the set-up.",{"type":9,"tag":457,"props":1245,"children":1246},{"v-slot:setup":459},[1247],{"type":9,"tag":23,"props":1248,"children":1249},{},[1250],{"type":20,"value":1251},"Day-to-day management can stay in-house, but the set-up takes time and method. A provider configures Apple Business, the MDM and the procedures, then hands over to the person who follows the fleet.",{"type":9,"tag":457,"props":1253,"children":1254},{"v-slot:provider":459},[1255],{"type":9,"tag":23,"props":1256,"children":1257},{},[1258],{"type":20,"value":1259},"Your fleet goes beyond what in-house management absorbs easily. An Apple-specialist provider takes care of the MDM, arrivals, departures, encryption and support, monitors the fleet to anticipate incidents and automates its upkeep.",{"type":9,"tag":175,"props":1261,"children":1263},{"id":1262},"setting-up-an-mdm-in-house",[1264],{"type":20,"value":1265},"Setting up an MDM in-house",{"type":9,"tag":1267,"props":1268,"children":1270},"blog-steps",{":items":1269},"[{\"id\":\"account\",\"title\":\"Open an Apple Business account\"},{\"id\":\"mdm\",\"title\":\"Choose an MDM and link it to Apple Business\"},{\"id\":\"rules\",\"title\":\"Define the baseline rules\"},{\"id\":\"resellers\",\"title\":\"Link the resellers\"},{\"id\":\"existing\",\"title\":\"Enrol the devices already in service\"},{\"id\":\"procedures\",\"title\":\"Write and test the procedures\"},{\"id\":\"releases\",\"title\":\"Follow Apple’s new releases\"}]",[1271,1279,1296,1304,1312,1320,1342,1350],{"type":9,"tag":457,"props":1272,"children":1273},{"v-slot:intro":459},[1274],{"type":9,"tag":23,"props":1275,"children":1276},{},[1277],{"type":20,"value":1278},"For an SME that chooses to run its MDM in-house, the set-up follows seven steps:",{"type":9,"tag":457,"props":1280,"children":1281},{"v-slot:account":459},[1282],{"type":9,"tag":23,"props":1283,"children":1284},{},[1285,1287,1294],{"type":20,"value":1286},"Apple has to ",{"type":9,"tag":246,"props":1288,"children":1291},{"href":1289,"rel":1290},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fbusiness\u002Faxm402206497\u002Fweb",[273],[1292],{"type":20,"value":1293},"verify the organisation",{"type":20,"value":1295},". It asks for two means of verification, and the check takes up to five business days.",{"type":9,"tag":457,"props":1297,"children":1298},{"v-slot:mdm":459},[1299],{"type":9,"tag":23,"props":1300,"children":1301},{},[1302],{"type":20,"value":1303},"The MDM links to the Apple Business account through certificates, which are renewed every year.",{"type":9,"tag":457,"props":1305,"children":1306},{"v-slot:rules":459},[1307],{"type":9,"tag":23,"props":1308,"children":1309},{},[1310],{"type":20,"value":1311},"FileVault encryption with the key held by the company, updates, apps, Wi-Fi.",{"type":9,"tag":457,"props":1313,"children":1314},{"v-slot:resellers":459},[1315],{"type":9,"tag":23,"props":1316,"children":1317},{},[1318],{"type":20,"value":1319},"The company gives its organisation ID to each reseller and adds that reseller’s number in Apple Business. New purchases then enrol themselves.",{"type":9,"tag":457,"props":1321,"children":1322},{"v-slot:existing":459},[1323,1328],{"type":9,"tag":23,"props":1324,"children":1325},{},[1326],{"type":20,"value":1327},"They come under management without a reinstall. iPhones and iPads stay unsupervised, though, and the user can remove management.",{"type":9,"tag":23,"props":1329,"children":1330},{},[1331,1333,1340],{"type":20,"value":1332},"To supervise them, ",{"type":9,"tag":246,"props":1334,"children":1337},{"href":1335,"rel":1336},"https:\u002F\u002Fsupport.apple.com\u002Fen-us\u002Fguide\u002Fapple-configurator-mac\u002Fapd7a57d9560\u002Fmac",[273],[1338],{"type":20,"value":1339},"Apple Configurator",{"type":20,"value":1341}," erases them, and the user keeps thirty days to remove them from management. The right moment is a reassignment.",{"type":9,"tag":457,"props":1343,"children":1344},{"v-slot:procedures":459},[1345],{"type":9,"tag":23,"props":1346,"children":1347},{},[1348],{"type":20,"value":1349},"The arrival, departure and loss procedures are written once, then tested on one device.",{"type":9,"tag":457,"props":1351,"children":1352},{"v-slot:releases":459},[1353],{"type":9,"tag":23,"props":1354,"children":1355},{},[1356],{"type":20,"value":1357},"Every major update is tested before it is rolled out to the fleet.",{"type":9,"tag":23,"props":1359,"children":1360},{},[1361],{"type":20,"value":1362},"These steps mainly take time and regularity. Every arrival, every departure and every new Apple release then calls for follow-up.",{"type":9,"tag":175,"props":1364,"children":1366},{"id":1365},"handing-your-mdm-to-a-provider",[1367],{"type":20,"value":1368},"Handing your MDM to a provider",{"type":9,"tag":23,"props":1370,"children":1371},{},[1372],{"type":20,"value":1373},"An MDM takes constant watch: new macOS and iOS versions, changes to Apple Business, certificates to renew. A provider makes it their job, and the company no longer depends on one person being available.",{"type":9,"tag":23,"props":1375,"children":1376},{},[1377],{"type":9,"tag":190,"props":1378,"children":1379},{},[1380],{"type":20,"value":1381},"Five points set providers apart:",{"type":9,"tag":490,"props":1383,"children":1384},{},[1385,1398,1411,1424,1437],{"type":9,"tag":200,"props":1386,"children":1387},{},[1388,1393,1396],{"type":9,"tag":190,"props":1389,"children":1390},{},[1391],{"type":20,"value":1392},"Proven Apple expertise",{"type":9,"tag":209,"props":1394,"children":1395},{},[],{"type":20,"value":1397},"\nA generalist provider often manages Macs as if they were PCs. Ask for a client case close to yours: number of devices, sites, what changed. macOS, iOS and Apple Business call for knowledge of their own.",{"type":9,"tag":200,"props":1399,"children":1400},{},[1401,1406,1409],{"type":9,"tag":190,"props":1402,"children":1403},{},[1404],{"type":20,"value":1405},"Monitoring that anticipates incidents",{"type":9,"tag":209,"props":1407,"children":1408},{},[],{"type":20,"value":1410},"\nA nearly full disk, a stuck update or disabled encryption can be spotted before they get in an employee’s way. Ask whether the fleet is monitored continuously, or whether the provider only steps in when someone calls.",{"type":9,"tag":200,"props":1412,"children":1413},{},[1414,1419,1422],{"type":9,"tag":190,"props":1415,"children":1416},{},[1417],{"type":20,"value":1418},"Settings that apply by themselves",{"type":9,"tag":209,"props":1420,"children":1421},{},[],{"type":20,"value":1423},"\nmacOS and app updates, security rules and performance settings should roll out automatically to every device. Employees do not have to start updates themselves, and every workstation stays configured the same way.",{"type":9,"tag":200,"props":1425,"children":1426},{},[1427,1432,1435],{"type":9,"tag":190,"props":1428,"children":1429},{},[1430],{"type":20,"value":1431},"The Mac as part of the whole IT system",{"type":9,"tag":209,"props":1433,"children":1434},{},[],{"type":20,"value":1436},"\nIn most SMEs, Macs sit alongside PCs, Microsoft 365 and a shared network. A provider that manages the whole applies the same security rules to every workstation and links the Macs to the company’s Microsoft accounts.",{"type":9,"tag":200,"props":1438,"children":1439},{},[1440,1445,1448],{"type":9,"tag":190,"props":1441,"children":1442},{},[1443],{"type":20,"value":1444},"Taking over the fleet and owning the devices",{"type":9,"tag":209,"props":1446,"children":1447},{},[],{"type":20,"value":1449},"\nAsk how the devices already in use will come under management, and whether employees can keep working during the takeover. The Apple Business account and the devices must stay in your company’s name.",{"type":9,"tag":23,"props":1451,"children":1452},{},[1453,1455,1461],{"type":20,"value":1454},"The price depends on the scope: number of devices, staff support, MDM licences included or not. Our article on ",{"type":9,"tag":246,"props":1456,"children":1458},{"href":1457},"\u002Fen\u002Farticles\u002Foutsourcing-it-management-sme",[1459],{"type":20,"value":1460},"outsourcing IT management",{"type":20,"value":1462}," details what a provider takes on beyond the MDM.",{"type":9,"tag":10,"props":1464,"children":1466},{"label":1465},"Avepto",[],{"type":9,"tag":15,"props":1468,"children":1470},{"id":1469},"avepto-apple-mdm-and-fleet-management-for-smes-in-french-speaking-switzerland",[1471],{"type":20,"value":1472},"Avepto: Apple MDM and fleet management for SMEs in French-speaking Switzerland",{"type":9,"tag":23,"props":1474,"children":1475},{},[1476],{"type":20,"value":1477},"Avepto deploys and runs the MDM of Apple fleets for SMEs in French-speaking Switzerland, from the audit to hardware renewal.",{"type":9,"tag":23,"props":1479,"children":1480},{},[1481],{"type":9,"tag":190,"props":1482,"children":1483},{},[1484],{"type":20,"value":1485},"Our support covers the whole lifecycle of the fleet:",{"type":9,"tag":1487,"props":1488,"children":1489},"blog-columns",{},[1490],{"type":9,"tag":196,"props":1491,"children":1492},{},[1493,1506,1519,1532,1545,1558],{"type":9,"tag":200,"props":1494,"children":1495},{},[1496,1501,1504],{"type":9,"tag":190,"props":1497,"children":1498},{},[1499],{"type":20,"value":1500},"Fleet audit",{"type":9,"tag":209,"props":1502,"children":1503},{},[],{"type":20,"value":1505},"\nInventory, updates, encryption, accounts and the management tool in place.",{"type":9,"tag":200,"props":1507,"children":1508},{},[1509,1514,1517],{"type":9,"tag":190,"props":1510,"children":1511},{},[1512],{"type":20,"value":1513},"Apple Business and MDM",{"type":9,"tag":209,"props":1515,"children":1516},{},[],{"type":20,"value":1518},"\nYour Apple Business account, which stays yours, and an MDM sized for you.",{"type":9,"tag":200,"props":1520,"children":1521},{},[1522,1527,1530],{"type":9,"tag":190,"props":1523,"children":1524},{},[1525],{"type":20,"value":1526},"Taking over existing devices",{"type":9,"tag":209,"props":1528,"children":1529},{},[],{"type":20,"value":1531},"\nMacs, iPhones and iPads in service come under management without a reset.",{"type":9,"tag":200,"props":1533,"children":1534},{},[1535,1540,1543],{"type":9,"tag":190,"props":1536,"children":1537},{},[1538],{"type":20,"value":1539},"Security and apps",{"type":9,"tag":209,"props":1541,"children":1542},{},[],{"type":20,"value":1544},"\nA documented security baseline, Microsoft 365 integration and your apps.",{"type":9,"tag":200,"props":1546,"children":1547},{},[1548,1553,1556],{"type":9,"tag":190,"props":1549,"children":1550},{},[1551],{"type":20,"value":1552},"Prevention and automation",{"type":9,"tag":209,"props":1554,"children":1555},{},[],{"type":20,"value":1557},"\nThe fleet is monitored to prevent incidents and kept tuned automatically.",{"type":9,"tag":200,"props":1559,"children":1560},{},[1561,1566,1569],{"type":9,"tag":190,"props":1562,"children":1563},{},[1564],{"type":20,"value":1565},"Support and follow-up",{"type":9,"tag":209,"props":1567,"children":1568},{},[],{"type":20,"value":1570},"\nRemote or on-site support in Geneva, through to erasing outgoing devices.",{"type":9,"tag":1572,"props":1573,"children":1579},"blog-case-study",{"client":1574,"place":1575,"sector":1576,"stats":1577,"to":1578},"ai4 Architecture","Geneva, Lausanne and Porto","Architecture practice","30 min|to prepare a new Mac, against 1 h 45 before;100%|of Macs encrypted, recovery keys held centrally;70|Apple devices under management, including 40 Macs","\u002Fen\u002Fcase-studies\u002Fai4-architecture-apple-fleet",[1580],{"type":9,"tag":23,"props":1581,"children":1582},{},[1583],{"type":20,"value":1584},"A growing practice spread over three offices. Before we stepped in, every new hire took half a day on site. Most of the work now happens remotely.",{"type":9,"tag":23,"props":1586,"children":1587},{},[1588,1590,1595],{"type":20,"value":1589},"To take stock of your fleet, discover how we handle ",{"type":9,"tag":246,"props":1591,"children":1592},{"href":248},[1593],{"type":20,"value":1594},"Apple device management for businesses",{"type":20,"value":1596},". Tell us how many devices you use: we reply in writing within one business day."]