Published 2024-03-10 by TechNet New England
Apple devices are everywhere in education. MacBooks for staff, iPads for classrooms, and a growing mix of devices that need to be enrolled, configured, updated, and secured without requiring hands-on setup for every single one. Managing Apple devices at scale requires a Mobile Device Management (MDM) platform. The most well-known option is Jamf, but it is not the only choice. This guide covers what MDM does, how Jamf compares to alternatives, and what education organizations should prioritize when managing their Apple fleet. ## What Apple MDM Does An MDM platform lets you manage Apple devices remotely. Instead of walking to each MacBook or iPad and configuring it by hand, you push settings, apps, and policies from a central console. Key capabilities include: **Zero-touch deployment.** When a new MacBook arrives, it automatically enrolls in your MDM through Apple Business Manager (or Apple School Manager). The device configures itself with your Wi-Fi, apps, security settings, and user profile without anyone touching it. **Configuration profiles.** You define what settings every device should have: Wi-Fi networks, email configuration, security policies, restrictions, VPN settings, wallpaper, and more. These are pushed to devices automatically. **App management.** Deploy apps silently to devices without requiring users to install anything. Update apps centrally. Remove apps when they are no longer needed. **Security enforcement.** Require passcodes, enable FileVault encryption, enforce automatic updates, restrict certain features, and remotely lock or wipe lost devices. **Inventory and reporting.** See every managed device, its OS version, storage, installed apps, encryption status, and last check-in time. ## Jamf: The Standard in Education Jamf is the most widely deployed Apple MDM in education. It is purpose-built for Apple and integrates deeply with Apple Business Manager, Apple School Manager, and the full Apple ecosystem. Strengths: deep Apple integration, large community, extensive documentation, strong education features, well-known by Apple support teams. Considerations: licensing cost per device, complexity for smaller organizations, requires someone who understands the platform to manage it properly. A common issue we see: organizations deploy Jamf but do not have the internal expertise to manage it. Certificates expire, enrollment profiles break, devices fall out of management, and the platform becomes a source of frustration instead of efficiency. The tool is only as good as the people managing it. ## Alternatives to Jamf **Mosyle.** Built specifically for Apple in education. Often less expensive than Jamf with a simpler interface. Includes security features and classroom management tools. Growing quickly in the K-12 space. **Addigy.** Cloud-native Apple device management. Popular with MSPs and IT service providers because it is designed for managing multiple organizations from one platform. Good for organizations that outsource IT management. **Microsoft Intune.** Part of the Microsoft ecosystem. Supports Apple devices alongside Windows. Less deep on Apple-specific features compared to Jamf or Mosyle, but useful for mixed environments that are already invested in Microsoft 365. **Kandji.** Focused on security and compliance. Strong automation features. More common in business environments than education, but capable. ## What Actually Matters When Choosing The MDM platform matters less than these three things: **1. Proper enrollment through Apple Business Manager.** Every Apple device your organization purchases should be registered in Apple Business Manager (ABM) or Apple School Manager (ASM). This is what enables zero-touch deployment and ensures you maintain control of the device even if it is wiped. If your devices were not purchased through an Apple authorized reseller or were not registered in ABM/ASM, enrollment becomes manual and more fragile. This is worth fixing even if it takes time. **2. Certificate management.** MDM platforms use certificates to communicate with devices. These certificates expire. When they expire, devices lose their management profiles, and re-enrolling them can require physically touching each one. Whoever manages your MDM needs to track certificate expiration dates and renew them before they lapse. This is one of the most common causes of MDM failures in education environments. **3. Someone who actually manages it.** An MDM platform that nobody monitors, updates, or maintains is worse than no MDM at all. It creates a false sense of security while devices drift out of compliance. Whether that person is internal IT staff or an outside provider, someone needs to own it: monitor enrollment status, push updates, review compliance, manage certificates, and respond when devices fall out of management. ## Education-Specific Considerations **Shared devices.** If students share iPads or Chromebooks, your MDM needs to handle shared device mode cleanly. This includes clearing user data between sessions and maintaining app configurations. **Content filtering.** CIPA compliance requires content filtering on devices used by minors. Some MDM platforms include filtering; others require a separate solution. **Classroom management.** Tools like Apple Classroom or Mosyle's classroom features let teachers see student screens, push links, lock devices during tests, and manage attention during class time. **Lifecycle management.** Education devices have hard lives. Drops, spills, lost chargers, broken screens. Your MDM should give you visibility into device health so you can plan replacements before devices fail during the school year. ## The Bottom Line The best MDM is the one that is properly configured, actively managed, and aligned with how your organization actually uses Apple devices. A simple platform that someone maintains every week will outperform a powerful platform that nobody touches for months. If your current Apple device management is not working well, the problem is usually not the platform. It is the lack of attention, expertise, or ownership behind it. --- *TechNet New England manages Apple device environments for education organizations and businesses across Massachusetts. [Contact us](/contact) if your Apple devices need better management.*