tomistruth t1_j6mc9q8 wrote on January 31, 2023 at 10:08 AM

Reply to comment by WelpIGaveItSome in Activation Lock is a great feature, but needs a rethink as 2020 Macs are turned into landfill by hugglenugget

I am not familiar with that problem but have a company where employees use macs. Can you expand on what you said a bit? Does this affect all newer models? How are you installing apps if you don't sign with your appleid?

joeyicecream t1_j6mig17 wrote on January 31, 2023 at 11:31 AM

If you register it with your Apple ID it’s going to require your Apple ID to unlock it.

Also he’s a bit wrong about this as well, if you send a remote wipe to a corporate Mac it’s going to be activation locked by whoever registered it initially.

WelpIGaveItSome t1_j6mmu8g wrote on January 31, 2023 at 12:20 PM

Why would you remote wipe a mac? Either they send it back to their IT department for wiping or the laptop is being declared lost.

Hell you don’t remote wipe macs at all cause if the user isn’t an admin, incompetent or something going wrong with partitioning theres nothing anyone can do cause I can’t remote into the computer.

joeyicecream t1_j6mors6 wrote on January 31, 2023 at 12:40 PM

Ok I was a bit wrong in my understanding of the issue. If you read the article it says that you wipe the Mac and then it twitters unlocking at the next setup. Big corps are wiping them and selling them off in large batches.

When the refurbishing company gets them and tries to set them up they’re unable to get past that step.

Even a step beyond that I prefer that hard drives are totally destroyed depending on what the device was used for.

WelpIGaveItSome t1_j6mmacy wrote on January 31, 2023 at 12:14 PM

Depending on your MDM (Mobile Device management) environment or lack of thereof you can either grab the .dmg and install things manually or preload software on the mac through a process known as “imaging” since every company requires a specific set up for employee computers UNLESS your a small company where you don’t have a dedicated IT department then everything changes.

Now there are 2 popular MDM solutions for Mac (Windows is a different beast) which is either JAMF or Kandji which can help preload software onto the computer through “0 touch” which preassigns the admin account and allows the computer to download everything the user will need a base level or loading the MDM profile manually, which will be required at some point.

With these 2 MDM solutions you can also disable app store cause you should never be signing into apple ID on company property unless your the CEO… which at that point i don’t care.

Corporate IT works differently from local store side IT, a lot more back doors or direct connections to apple to solve these issues. And i can go into detail about Kandji and JAMF but I’m not JAMF certified and only demo’ed Kandji