Device management
-
Data erasure
Factorial IT erases managed device data using the encryption-key destruction built into each operating system. This article covers the...
-
Platform support
Factorial IT manages macOS, Windows, Linux, iOS, iPadOS, Android and ChromeOS from one place. This article lists the minimum...
-
Set up MDM on Apple devices
Apple devices need an APNs certificate before they can be managed. This article covers what the certificate does, how...
-
Network whitelisting
When managed devices sit behind a corporate firewall or proxy, certain endpoints have to be reachable or enrolment, policy...
-
Set up MDM on Windows
Windows needs no certificates and no portal configuration. MDM is active as soon as your account exists, so the...
-
Device groups
Overview Use device groups whenever a setting should apply to some devices but not all. Because the membership is...
-
Set up MDM on Android
Overview Factorial IT uses Fleet as the MDM agent on Android. Android 13 and later is supported; anything below...
-
Set up MDM on Linux
Overview Factorial IT uses Fleet as the MDM agent on Linux. It installs from a lightweight package and reports...
-
Enrolment methods
Overview Start here before your first rollout. Employee enrolment always works on every supported platform, so it is your safe...
-
Employee enrolment
Employee enrolment is the standard way to enrol a device: the employee installs the agent themselves from a link...
-
Employee enrolment guide
Step-by-step instructions for installing the agent on your own device, with answers to the questions people ask most. It...
-
Frequent employee questions
Overview Three things to keep in mind before the first invitation goes out: The agent has a different name...
-
Account-driven device enrolment
Overview Use this when employees use personal iPhones or iPads for work and privacy is the sticking point. Nothing...
-
Device assignment
Devices are created and assigned to employees automatically during enrolment — you do not need to import your device...
-
Silent agent deployment
Overview macOS Windows Linux iOS/iPadOS Android Yes Yes Yes No No Prerequisite: an existing MDM, Active Directory with Group...
-
Migrate Macs with Apple Business
Overview If your Macs are not in Apple Business, this method is unavailable — pick another from Enrolment methods. Prerequisites,...
-
Communication resources
Overview A rollout is a communication exercise more than a technical one. Employee enrolment depends on people acting, so...
-
What is zero-touch deployment?
Overview A device set up this way is managed before anyone logs in. That changes three things: Security. Management...
-
Clear passcode
An employee who has forgotten their Android PIN, pattern or password does not need a factory reset. Clear passcode...
-
Zero Touch for Apple
Overview Apple renamed Apple Business Manager to Apple Business in April 2026. Anything you read elsewhere that says "Apple Business...
-
Resolve enrolment issues
Overview Enrolment problems fall into two groups, and they need different answers. The enrolment never finished. The device is partially...
-
Lock devices
Overview Locking works on every platform you can manage: macOS Windows Linux iOS / iPadOS Android ✅ ✅ ✅...
-
Wipe devices
Overview macOS Windows Linux iOS / iPadOS Android ✅ ✅ ✅ ✅ Company-owned only How to use Open Devices and...
-
Disenrol devices
Overview Remote disenrolment has two conditions, and both have to hold: The device is enrolled and still present in...