WelpIGaveItSome

WelpIGaveItSome t1_j6mmu8g wrote

Why would you remote wipe a mac? Either they send it back to their IT department for wiping or the laptop is being declared lost.

Hell you don’t remote wipe macs at all cause if the user isn’t an admin, incompetent or something going wrong with partitioning theres nothing anyone can do cause I can’t remote into the computer.

−5

WelpIGaveItSome t1_j6mmacy wrote

Depending on your MDM (Mobile Device management) environment or lack of thereof you can either grab the .dmg and install things manually or preload software on the mac through a process known as “imaging” since every company requires a specific set up for employee computers UNLESS your a small company where you don’t have a dedicated IT department then everything changes.

Now there are 2 popular MDM solutions for Mac (Windows is a different beast) which is either JAMF or Kandji which can help preload software onto the computer through “0 touch” which preassigns the admin account and allows the computer to download everything the user will need a base level or loading the MDM profile manually, which will be required at some point.

With these 2 MDM solutions you can also disable app store cause you should never be signing into apple ID on company property unless your the CEO… which at that point i don’t care.

Corporate IT works differently from local store side IT, a lot more back doors or direct connections to apple to solve these issues. And i can go into detail about Kandji and JAMF but I’m not JAMF certified and only demo’ed Kandji

1

WelpIGaveItSome t1_j6mb1ix wrote

Well this is exactly why mac based companies hammer it in to NEVER sign into your apple ID unless your someone important and 9.9 times out of 10, you aren’t.

Kandji and JAMF also have features that disable app store and the ability to sign into AppleID for this exact reason. This is probably a big problem at resellers but for most companies not as much.

Plus if this is a corporate laptop, your local apple store (or the tech) can just wipe the hard drive and bypass most of this anyways. I don’t see how activation lock is a problem as long as the user doesn’t treat their work Mac like a personal computer.

−16