Overview
Three things to keep in mind before the first invitation goes out:
- The agent has a different name from the platform. Employees get an invitation from you, but the software that installs on their device is called FleetDM. Expect to explain that once.
- Reminders are automatic. You control when the first invitation goes out. After that, employees are reminded every week until the agent is installed.
- A personal email works fine. If you only have someone's personal address on file, they can use it to download the installer. The device enrols and is managed exactly the same way.
How to use
The answers to have ready
-
“This takes too long / looks complicated.”
It needs no technical skills. The whole process is documented step by step and takes under three minutes.
-
“Will it slow my device down?”
FleetDM is lightweight and built to stay out of the way — unlike heavier alternatives, the device stays as responsive as before. If someone reports a real slowdown, treat it as a specific issue to chase rather than an expected cost.
-
“This is about monitoring us.”
The point is protecting sensitive data and meeting security requirements, not watching people. It cannot access documents or browser history. Anything it does collect is limited to what security and operations actually need. This is the objection worth preparing properly, because a weak answer here sinks a rollout.
Problems during installation
-
“My device asks me to change my password but will not let me.”
On the first restart of a Mac after installing MDM with a password policy, the password change can fail even when everything looks green. It is a macOS bug. Tell them to restart the computer and it works.
-
“My Mac says it is already managed by an MDM.”
Ask them to check the profile name. If it is your company's enrolment profile, they have probably already enrolled — confirm in the dashboard. If it is a different profile, send them the procedure to remove the old MDM first.
Tips and Best Practices
- Answer the monitoring question before anyone asks it. Put it in the announcement, not just in your back pocket. It is the concern that spreads fastest and the one with the most concrete answer.
- Name FleetDM in your first email. People trust an unexpected agent name far less than one they were told to expect.
- Send the invitations in one batch and let the weekly reminder work. Chasing individuals manually costs more than waiting a week.
- Keep the removal procedure for other MDMs to hand before you start. On a mixed fleet somebody will hit it on day one.
Troubleshooting and FAQ
Troubleshooting
- Employees are not enrolling and nobody says why. Check they have administrator rights on their machines. It is the most common silent blocker and it looks identical to people ignoring the email.
- Someone enrolled but the device is not assigned to them. Usually several user sessions on the machine, or a generic installer. See Device assignment.
- Someone is stuck on a Mac that is already managed. They cannot remove a supervised profile themselves. It has to come off from the previous MDM's console.
FAQ
-
How often are employees reminded?
Every week after the first invitation, until the agent is installed.
-
Can employees use a personal email address?
Yes, with no effect on enrolment or management.
-
Should employees contact support directly?
No — they should come to you. Support is for administrators.