Device management
-
Data erasure
Factorial IT erases managed device data using the encryption-key destruction built into each operating system. This article covers the...
-
Platform support
Factorial IT manages macOS, Windows, Linux, iOS, iPadOS, Android and ChromeOS from one place. This article lists the minimum...
-
Set up MDM on Apple devices
Apple devices need an APNs certificate before they can be managed. This article covers what the certificate does, how...
-
Network whitelisting
When managed devices sit behind a corporate firewall or proxy, certain endpoints have to be reachable or enrolment, policy...
-
Set up MDM on Windows
Before you start There is nothing to switch on. Management is active from the moment your account exists, so...
-
Device groups
Overview Use device groups whenever a setting should apply to some devices but not all. Because the membership is...
-
Set up MDM on Android
Android needs a Managed Google Play account connected before devices can enrol. This article covers that one-off setup and...
-
Set up MDM on Linux
Before you start There is nothing to switch on. Management is active from the moment your account exists, so you...
-
Enrolment methods
There are five ways to get a device under management, and the right one depends on your existing setup,...
-
Employee enrolment
Employee enrolment is the standard way to enrol a device: the employee installs the agent themselves from a link...
-
Employee enrolment guide
Step-by-step instructions for installing the agent on your own device, with answers to the questions people ask most. It...
-
Frequent employee questions
Overview Three things to keep in mind before the first invitation goes out: The agent has a different name...
-
Account-driven device enrolment
Overview Use this when employees use personal iPhones or iPads for work and privacy is the sticking point. Nothing...
-
Device assignment
Devices are created and assigned to employees automatically during enrolment — you do not need to import your device...
-
Silent agent deployment
Deploy the agent centrally, with no employee involvement, using whatever you already have — an existing MDM, Active Directory...
-
Migrate Macs with Apple Business
Overview If your Macs are not in Apple Business, this method is unavailable — pick another from Enrolment methods. Prerequisites,...
-
Communication resources
Overview A rollout is a communication exercise more than a technical one. Employee enrolment depends on people acting, so...
-
What is zero-touch deployment?
Overview A device set up this way is managed before anyone logs in. That changes three things: Security. Management...
-
Clear passcode
An employee who has forgotten their Android PIN, pattern or password does not need a factory reset. Clear passcode...
-
Zero Touch for Apple
Zero touch means a Mac, iPhone or iPad enrols itself the moment someone switches it on, straight out of...
-
Resolve enrolment issues
A device that shows up offline while someone is clearly using it has an enrolment problem, not a connectivity...
-
Lock devices
Remote lock blocks access to a device without touching its data. Reach for it when a laptop goes missing,...
-
Wipe devices
Wiping erases a device remotely and returns it to factory state. It is the right answer for a stolen...
-
Unenrol devices
Unenrolment takes a device out of management. Do it remotely from the device panel whenever you can; the manual...
-
Firewall
The firewall control switches on the operating system's own firewall on macOS and Windows. There is nothing to configure...
-
Disk encryption
Turning on the disk encryption control encrypts the drive on every targeted device and escrows the recovery key, so...
-
Unblock lost passwords
Someone cannot get into their laptop. Before you reach for a recovery key, work out which of four things...
-
Migrate iPhones and iPads with Apple Business
On iOS and iPadOS 26 and later, you can move company iPhones and iPads off your old MDM without...
-
MDM settings
The MDM settings page holds every configuration option for your MDM in one place. Use it to check platform...
-
AirDrop restriction
The AirDrop restriction turns off AirDrop discoverability on Macs. Use it to stop files leaving or arriving on company...
-
Device naming
Overview macOS Windows Linux iOS / iPadOS Android ✅ ✅ ✅ You describe the naming format in...
-
Device Management overview
Device Management lets you run macOS, Windows, Linux, iOS, iPadOS and Android devices from one console. Start here to...
-
USB storage blocking
This control stops USB keys, SD cards and other removable storage from being used on managed devices. Use it...
-
Controls overview
A control pushes a single setting or behaviour to the devices you choose. Use this page to see which...
-
Admin password rotation
Admin password rotation changes the password of a local administrator account on a fixed schedule and keeps each new...
-
Wi-Fi
This control sends company Wi-Fi settings to managed devices. Use it so employees join the office network automatically, without...
-
Password and screenlock
This control sets the password rules and the idle time before the screen locks on managed devices. Use it...
-
Software installation status
Adding software says what should be on your devices. Installation status shows what is really there, device by device,...
-
Custom software
Custom software lets you upload your own installer packages and deploy them to managed devices. Use it for internal...
-
Automatic app and OS updates
This control makes macOS devices download and install app and system updates in the background. Use it to keep...
-
Software overview
Factorial IT can deploy apps from four different sources. This page helps you pick the right one for each...
-
App Store apps
App Store apps reach your devices through Apple's Volume Purchase Programme (VPP). You buy licences in bulk and send...
-
Managed Software
Managed Software is a ready-made catalogue of popular apps such as Slack, Zoom and Chrome. Fleet packages each app...
-
List of maintained apps
This list shows every app in the Managed Software catalog, in alphabetical order. A ✅ means Fleet maintains an...
-
Script library
The Script library is where you keep the scripts you run on your devices. Upload a .sh, .py or...
-
Generate settings via AI
Write the setting you want in everyday words and ONE turns it into an MDM configuration profile for your...
-
Mac login with Entra
Employees unlock their Mac with their Microsoft Entra ID username and password, thanks to Apple's Platform SSO. Use it...
-
Mac login with Factorial IT
Employees sign in to their Mac with their Factorial IT account through Apple Platform Single Sign-On (Platform SSO), using...
-
Windows login with Okta
Employees sign in to Windows with Okta Verify and then open Okta-connected apps without signing in again. Use it...
-
SecureToken rules
macOS asks for an account with a secure token before it lets you manage local users, for example to...
-
Change a local session password
Overview The new password is set remotely. You or the employee use it the next time someone signs in...
-
About AirPrint
The AirPrint control adds a network printer to the Macs you target. Employees then pick it straight from the...
-
Factorial IT with Google Chrome
This control sends managed Chrome settings to your Macs and Windows PCs: extensions, homepage, bookmarks and a few browser...
-
Mac login with Okta
Employees log in to their Mac with their Okta username and password through Apple Platform SSO, and then reach...
-
About Custom file
Custom file lets you upload your own configuration profile to apply settings that no built-in Factorial IT control covers....
-
Endpoint Protection overview
Factorial IT installs your endpoint detection and response (EDR) agent on the devices it manages and shows you which...
-
About recoveryOS protection
This control sets a recovery lock password on Apple Silicon Macs, so nobody can use recoveryOS without it. Use...
-
Screen capture blocking
Overview macOS Windows Linux iOS / iPadOS Android ✅ How to use Go to MDM...
-
About App blocking
Overview macOS Windows Linux iOS / iPadOS Android ✅ The control runs on Santa, an...
-
Google Play Store apps
Factorial IT sends approved Android apps to managed devices through managed Google Play, part of Android Enterprise. Use it...
-
Lock MDM profiles pane
This control hides the Profiles section of System Settings on managed Macs. Use it so employees cannot see or...
-
Admin management
Admin management creates a local administrator account on your Macs and Windows PCs, with a random password for each...
-
Bitdefender
Factorial IT can roll out the Bitdefender GravityZone agent to your macOS and Windows devices. Use this guide when...
-
SentinelOne
Connect your SentinelOne instance to Factorial IT and the SentinelOne agent is deployed automatically on macOS, Windows and Linux...
-
Remote access
Remote access lets you see and control a managed device's screen from the console, over an encrypted connection. Use...
-
ThreatDown
Factorial IT installs the ThreatDown agent (by Malwarebytes) automatically on your devices to protect them against security threats. Use...
-
Audit logs
The MDM audit log keeps a record of every administrative action taken in device management. Use it to see...
-
Custom fields
Custom fields are attributes you create yourself and add to devices, employees, orders and accessories. Use them to record...
-
Find the right program name for Automatic Install
Automatic Install needs a detection query that recognises your software once it is installed. This guide shows how to...
-
Bastion
Bastion runs compliance checks on the security settings of your Mac, Windows and Linux devices. It gets that data...
-
Vanta
The Vanta integration sends your Factorial IT administrators and your macOS and Windows devices to Vanta once an hour....
-
Upgrade from Windows 10 to Windows 11
This guide finds the Windows 10 devices that can move to Windows 11 and then starts the upgrade on...
-
What an MDM can and cannot do
Device management (MDM) looks at the state of a device, never at what the person using it is doing....
-
Mac login with Factorial IT: employee guide and FAQ
This guide is for employees. It explains how to link your Mac to your Factorial IT account so you...
-
CrowdStrike Falcon
Factorial IT can install the CrowdStrike Falcon sensor on macOS, Windows and Ubuntu devices. This guide covers the deployment...