Mac SimpleMDM Enrollment
The initial process to enrolling Macs is similar to enrolling iPads in SimpleMDM. Please complete all of these steps to ensure the device is enrolled and then check the AD Binding article for the last steps.
- First, check SimpleMDM under Devices>Enrollments, click on the SimpleMDM link, and then search by serial number. If the device is found, skip to the next step. Otherwise, go to school.apple.com to switch the assigned MDM for the device.
- In Apple School Manager, click on Devices and search for the device by serial number. Once found, click on the device and then the ellipsis (...) on the right hand side to 'Assign Device Management'. Select SimpleMDM from the drop down and click continue until it saves the change.
- Go back to Enrollments in SimpleMDM, click the SimpleMDM link, and then 'Sync with Apple'. Wait a few moments while it syncs and then search for the device by serial number again. Once it shows up, you're ready to prep the device for enrollment.
- If it is a new device, power it on and go through the initial set up on the Mac. New devices are automatically added to SimpleMDM when purchased through Apple. You will need to connect to 6334-init or BSD-Events for the initial set up. Once you complete the enrollment process, the device will download the Wifi profile for BSD-Secure.
- If this is an existing device that needs changed over from Jamf or a Bethel owned device that was not previously enrolled in an MDM, it will need to be wiped. Please ensure that the above steps are done in order to verify that the device is going to be enrolled in SimpleMDM before wiping the iPad. Otherwise, you'll have to wipe the device a second time because it will try to pick up an invalid profile like Jamf or not have a profile assigned to it at all.
- Back up local data if necessary.
- Check how to restore the Mac online. It varies by model or by the CPU (Intel vs Apple). Typically it's either: hold down command + R (or Command + Option + R) during boot until you see the Apple logo or Recovery screen OR, if available, Apple menu > System Settings > General > Transfer or Reset > Erase All Content and Settings.
- Choose 'Disk Utility' when shown the option.
- Erase the main Macintosh HD drive. This will wipe the OS to be able to re-install afterwards.
- Close the Disk Utility and then choose Reinstall MacOS. Wait until this finishes and then you'll be able to complete the enrollment process. You may need to update the OS once logged in since this re-installs the OS that the device was shipped with.
- Move the device in SimpleMDM to the appropriate group to receive all necessary profiles.
- REMOVE Default Group AFTER it has picked up all the new group's profiles. The default group only helps with initial configuration and is not needed afterwards (assuming you have the necessary network profiles in the new group)
- Proceed with the AD Binding article to finish the process. Otherwise, users will not be able to log in. The only valid user so far is the 'sadmin' user.