Endpoints · Operating Systems
macOS
Apple's desktop operating system, managed through the Apple MDM framework with declarative configuration and hardware backed security.
IntermediateAppleUpdated 2026-09-01
Overview
macOS management uses Apple's MDM protocol: devices enrol through Apple Business Manager, receive configuration profiles, and are increasingly configured declaratively so the device enforces state itself. FileVault, Gatekeeper, System Integrity Protection and the Secure Enclave provide the security foundation.
Key differences from Windows include no Group Policy equivalent, user approved MDM requirements for some settings, and a separate patching cadence that requires its own update policy and testing.
Security considerations
- Enforce FileVault with escrowed recovery keys and require a supervised, ABM enrolled state for corporate devices.
- Manage privacy (PPPC) profiles explicitly so security tooling has the access it needs.