3.0 Enrolling Mac MDM using ADE/DEP

The Device Enrollment Program (DEP) is part of the Apple Deployment Programs and provides administrators with a streamlined way to deploy multiple corporate owned Apple devices. Upon device activation, configuration of the device is immediate and enrollment with the MDM server is automatic. There is no need for IT administrators to physically access each device to complete the setup.

Prerequisites:

Before enrolling a Mac device to ZENworks, you need to ensure that the prerequisites are met in the following order:

Task

Details

In the Apple Business Manager Portal, add an MDM Server

For more information, refer to the Apple documentation

MDM Servers and APNs

For more information, see MDM Servers and APNs Configuration

Configure the ZENworks MDM Server

For more information, see Configuring an MDM Server

Enable Push Notifications

For more information, see Enabling Push Notifications

Configure a DEP Server in ZENworks. The workflow associated with enrolling DEP devices are as follows:

  • Linking ZENworks to the Apple Deployment Programs Account

  • Assigning Devices

  • Syncing Devices

  • Viewing DEP Devices

For more information, see Linking ZENworks to the Apple Deployment Programs Account, Assigning Devices, Syncing Devices, Viewing DEP Devices

Setup DEP Attributes - including Skip Panes / Mac Accounts

For more information, see General and Skip Setup Item Settings.

Configure the Administrator and Primary User Accounts

NOTE:Account configuration is required only for ADE or DEP and not required for OTA.

For more information, see Account Configuration.

For information on enrolling any existing Mac OS device as DEP, see the following Apple documentation sections:

Procedure:

Enrolling a DEP device is simple for an end user, as you can enable the user to skip most of the device activation prompts by modifying the DEP settings.

Turn on the device and follow the setup prompts to enroll the device after powering on the device for the first time or after device reset. Once the wizard is finished, the Mac device will be enrolled into ZENworks via MDM.

If the User account is configured (Admin or local user account) then those accounts will be created on the Mac device.

After the device enrolls, you can view the Deployment Status of the device in ZCC, which should have changed from Discovered to Managed. You can view this status on Device > Discovered > Apple DEP Devices. For more information, see Section 5.0, Viewing Device Information. The enrolled device object is also created within the Workstations folder (Devices > Workstations).

For more information, see Enrolling a DEP Device.