4 ms·
I believe your MDM solution should be able to set up a corporate bypass for this as well as allow you to remotely locate the device: https://docs.jamf.com/jamf
by morpheuskafka 4y ago
I believe your MDM solution should be able to set up a corporate bypass for this as well as allow you to remotely locate the device:
https://docs.jamf.com/jamf- https://docs.jamf.com/jamf-
now/documentation/Using_Activation_Lock_Bypass.html
Another approach is to just let employees keep or buy out their laptop when they leave as a benefit. The cost of a MacBook isn't that huge relative to a tech salary.
- eli 4y agoData privacy and security policies can’t let ex-employees just walk off with devices containing company data. A neat feature Apple could maybe add is the ability for the user to have their device wiped in a way that generates a suitable certificate of destruction.
- dfadsadsf 4y agoMDM allows you to remotely wipe laptop and you get confirmation that laptop was wiped. If you are a business with more than 2 people and provide laptops to employees, not enabling MDM is just negligence. Lots of inexpensive MDM services for all sizes of businesses.
- selykg 4y agoIn this case we're a non-profit funded by grant dollars. So, we're spending a good chunk of cash on hardware relative to what many do primarily because I want quality products for our staff and I'd like it to be reliable and secure. I don't think buying it out will be a possibility, but perhaps. Always a discussion. We would definitely need to find a way to validate wiping the device though. Nothing we have is... that sensitive but I'd like to make sure they aren't walking away with user data. I assumed MDM might do something here but wasn't 100% positive.