Limited Support for Mac MDM
In the current ZENworks release, Mac MDM support is limited. The features which are documented should work as expected, but there may be issues with undocumented aspects of device management. For some issues, a fix may only be available in a later release.
Mac MDM provides a management solution to help IT administrators to manage devices, without compromising users' privacy on their devices. The ZENworks Mac MDM document includes information that is required to configure and use the Mac MDM feature in ZENworks. By leveraging the features of ZENworks, you can perform multiple management operations on Mac devices:
Enroll (register) devices to your ZENworks Management Zone. Users can enroll their devices as:
Managed: Management of a Mac device is enabled using the ZENworks Agent and Mac MDM that is installed on the device. When a Mac MDM device is enrolled via DEP or OTA, those devices are managed by ZENworks.
Utilize Apple Device Enrollment Program (DEP)to streamline deployment of multiple corporate owned Mac MDM devices.
Distribute Configuration Profile to Managed Mac devices to manage certain features on the device such as access to VPN and to run enterprise apps.
NOTE:The Provisioning Profile type is not supported when creating the macOS MDM bundle.
Distributing VPP Apps: Distribute and manage apps purchased using the Apple Volume Purchase Program (VPP).
Unenrolling Mac MDM Device via Quick Task: You can initiate the Unenroll MDM Device Now quick task to unenroll devices from ZENworks that you no longer want to manage.
Retiring and Unretiring Devices: You can now retire or unretire Mac MDM devices. If you retire a workstation device, the selected device is retired from the ZENworks zone. If you unretire the device in the future, its assignments are restored.
Registration Rules: A registration rule is a set of predefined criteria (for example, operating system type, CPU, or IP address) that you define. Using Registration Rules, you can manage a large number of devices and automatically add them to the correct folders and groups during registration.