Device management
-
Data erasure
Factorial IT erases managed device data using the encryption-key destruction built into each operating system. This article covers the...
-
Platform support
Factorial IT manages macOS, Windows, Linux, iOS, iPadOS, Android and ChromeOS from one place. This article lists the minimum...
-
Set up MDM on Apple devices
Apple devices need an APNs certificate before they can be managed. This article covers what the certificate does, how...
-
Network whitelisting
When managed devices sit behind a corporate firewall or proxy, certain endpoints have to be reachable or enrolment, policy...
-
Set up MDM on Windows
Before you start There is nothing to switch on. Management is active from the moment your account exists, so...
-
Device groups
Overview Use device groups whenever a setting should apply to some devices but not all. Because the membership is...
-
Set up MDM on Android
Android needs a Managed Google Play account connected before devices can enrol. This article covers that one-off setup and...
-
Set up MDM on Linux
Before you start There is nothing to switch on. Management is active from the moment your account exists, so you...
-
Enrolment methods
Overview Start here before your first rollout. Employee enrolment always works on every supported platform, so it is your...
-
Employee enrolment
Employee enrolment is the standard way to enrol a device: the employee installs the agent themselves from a link...
-
Employee enrolment guide
Step-by-step instructions for installing the agent on your own device, with answers to the questions people ask most. It...
-
Frequent employee questions
Overview Three things to keep in mind before the first invitation goes out: The agent has a different name...
-
Account-driven device enrolment
Overview Use this when employees use personal iPhones or iPads for work and privacy is the sticking point. Nothing...
-
Device assignment
Devices are created and assigned to employees automatically during enrolment — you do not need to import your device...
-
Silent agent deployment
Deploy the agent centrally, with no employee involvement, using whatever you already have — an existing MDM, Active Directory...
-
Migrate Macs with Apple Business
Overview If your Macs are not in Apple Business, this method is unavailable — pick another from Enrolment methods. Prerequisites,...
-
Communication resources
Overview A rollout is a communication exercise more than a technical one. Employee enrolment depends on people acting, so...
-
What is zero-touch deployment?
Overview A device set up this way is managed before anyone logs in. That changes three things: Security. Management...
-
Clear passcode
An employee who has forgotten their Android PIN, pattern or password does not need a factory reset. Clear passcode...
-
Zero Touch for Apple
Overview Apple renamed Apple Business Manager to Apple Business in April 2026. Anything you read elsewhere that says "Apple Business...
-
Resolve enrolment issues
Overview Enrolment problems fall into two groups, and they need different answers. The enrolment never finished. The device is partially...
-
Lock devices
Remote lock blocks access to a device without touching anything on it. Reach for it when a laptop goes...
-
Wipe devices
Wiping erases a device remotely and returns it to factory state. It is the right answer for a stolen...
-
Disenrol devices
Overview Remote disenrolment has two conditions, and both have to hold: The device is enrolled and still present in...
-
Firewall
The firewall control switches on the operating system's own firewall on macOS and Windows. There is nothing to configure...
-
Disk encryption
Turning on the disk encryption control encrypts the drive on every targeted device and escrows the recovery key, so...
-
Unblock lost passwords
Someone cannot get into their laptop. Before you reach for a recovery key, work out which of four things...
-
Migrate iPhones and iPads with Apple Business
On iOS and iPadOS 26 and later, you can move company iPhones and iPads off your old MDM without...