Apple device management

Mac, iPad and iPhone.Managed as first-class citizens.

Zero-touch deployment, Jamf and Intune, and security that doesn't stop at Windows. For small businesses, enterprises and schools, by Apple-certified engineers.

Book an Apple estate reviewSee how zero-touch works ›
EnrolledEncryptedApps readyCompliant
  • Jamf Professional Partner
  • Apple Business & School Manager reseller
  • Apple-certified engineers
  • Jamf 300 certified

Zero-touch deployment

Out of the box. Already yours.

No imaging, no engineer visit, no half-configured laptops. The device sets itself up the moment it's switched on.

  1. 1

    Ordered through us

    Macs, iPads and iPhones bought through our Apple reseller account appear in your Apple Business or School Manager automatically.

  2. 2

    Assigned before it ships

    Each device is pointed at your Jamf or Intune before the box leaves the warehouse. Nobody at your end touches it.

  3. 3

    Opened by the person

    Power on, join the Wi-Fi, sign in with the work account. That is the whole of the setup.

  4. 4

    Ready in minutes

    Apps installed, encryption on, policies applied, recovery key held centrally. No engineer visit, no imaging.

Apple at every scale

From a handful of Macs to the whole enterprise.

The same platform, the same certified engineers and the same standard at every size. What changes is how much of it you need.

  • Small business

    A handful of Macs.

    • Zero-touch from the very first Mac
    • Patching and compliance from day one, even before full device management
    • Cyber Essentials evidence without an IT department
    • The same engineers and service desk as our largest customers

  • Growing organisations

    Hundreds of devices.

    • Jamf Pro with Connect and Protect, set up against your Microsoft tenant
    • A branded Self Service app, so IT isn't an app-install queue
    • One sign-in policy across Mac and Windows
    • Starters ready on day one, leavers wiped centrally

  • Enterprise and multi-site

    Thousands, across sites.

    • Releases rolled out in stages: our Macs, a pilot group, then everyone
    • Mac security alerts into the same 24/7 SOC as your Windows estate
    • Co-managed with your own IT team, with access set by role
    • Independent compliance evidence across every device and site

For business and for schools

One specialism. Two very different estates.

Business

Mac and iPhone at work.

  • Jamf Pro or Intune, chosen to fit the rest of your estate
  • Sign in to the Mac with the same Microsoft work account
  • Encryption on every Mac, recovery keys held centrally
  • Jamf Protect on every Mac, watched with your Windows fleet
  • A branded Self Service app for approved software
  • Company iPhones, or staff's own with work data kept separate
  • Patching and compliance proven, with audit evidence on demand

Education

iPad in the classroom.

  • Jamf School with Apple School Manager
  • Jamf Teacher, Student and Parent apps
  • Shared iPad for younger year groups
  • Apple Classroom so teachers can guide the lesson
  • Jamf Safe Internet filtering by year group
  • Apps bought in volume and reassigned each year
  • Installed by DBS-checked engineers, in the holidays

Why Jamf

Built for Apple. Run by people certified on it.

Jamf has focused on Apple devices since 2002. We're a Jamf Professional Partner with Jamf 300 certified engineers, so you get the platform built for Apple and the people who know it best.

Day one.

Every new Apple release supported the day it ships. Fifteen years running.

Jamf is trusted by more than 75,000 organisations and 30 million devices worldwide.

  • Day-one Apple support

    Every new macOS, iOS and iPadOS release is supported the day Apple ships it.

    With M-Tech: We test each release on our own Macs first, then roll it out to you on a deadline.

  • Sign in with your work account

    Jamf Connect lets staff sign in to the Mac with their Microsoft work account, keeps the password in step, and gives approved people secure access to work apps without a VPN.

    With M-Tech: Set up against your Microsoft tenant, under the same sign-in rules as your PCs.

  • Security built for Mac

    Jamf Protect uses Apple's own security interfaces to stop malware, control USB and external drives, and filter risky websites.

    With M-Tech: Alerts watched by the same team that watches your Windows fleet.

  • Your own app store

    Self Service gives staff a branded catalogue of approved apps and fixes they can install themselves, without admin rights.

    With M-Tech: We stock it, brand it and keep it current.

  • Updates that manage themselves

    Set the update policy once and devices keep themselves current within it: deadlines, deferrals, no scripts.

    With M-Tech: We set the deadlines and chase the stragglers, so nobody is left on last year's software.

  • Made for the classroom

    Jamf School pairs with the Jamf Teacher, Student and Parent apps, and Jamf Safe Internet filters the web for school devices.

    With M-Tech: Deployed with your year-group policies, usually in the holidays.

Choosing a platform

Jamf or Intune? We run all three.

The right answer depends on what else you run. We'll recommend the one that fits, not the one that's easiest for us.

Jamf ProJamf SchoolMicrosoft Intune
Best forBusiness Mac and iPhone fleetsSchool and trust iPad estatesMostly-Windows organisations with some Macs and iPhones
Apple depthThe deepest macOS control, every new Apple release supported on day oneBuilt around teaching: Jamf Teacher, Classroom, Shared iPadThe essentials, in the same console as Windows
Alongside WindowsRuns next to Intune, one sign-in policy across bothSits beside the school's Windows managementOne console for everything
Who you callM-TechM-TechM-Tech

Security

Protection that doesn't stop at Windows.

  • Encrypted by default

    Every Mac encrypted on first boot, the recovery key held centrally, not on a sticky note.

  • One sign-in policy

    Microsoft conditional access and Jamf Connect cover Macs and iPhones too. No second rulebook for Apple.

  • Threat protection built for Mac

    Jamf Protect stops malware using Apple's own security interfaces, watched by the same team as your Windows fleet.

  • USB and external drives controlled

    Only approved storage connects, so client data doesn't walk out of the door on a memory stick.

  • Lost means locked

    Lost mode, remote wipe and Activation Lock managed, so a missing device is an inconvenience, not a breach.

  • Apps you approve

    A branded Self Service app and no admin rights by default. People get what they need without installing what they like.

Part of our wider cyber security service ›

Proof, not promises

Your device management says it's compliant. We check anyway.

Management tools report what they were told to do. We measure what actually happened, on every Mac, continuously.

Macs, but no device management yet?

We can bring them into patching, update enforcement and security checks straight away, with audit evidence from the start, then move them onto Jamf when you're ready.

  • Every app patched, not just the OS

    Each app on each Mac is found, compared with the version it should be on, and patched on a controlled cycle.

  • macOS updates on a deadline

    Users are kept informed, the install is tracked, and the update is enforced before the device falls out of compliance.

  • Security settings that stay on

    Encryption, firewall, Gatekeeper and screen lock checked continuously, and put back when they drift.

  • Measured independently

    Compliance is checked separately from what the management tool reports, so a silent failure shows up as a failure.

  • Audit-ready in minutes

    Evidence exported on demand, mapped to Cyber Essentials and ISO 27001 controls.

  • The same standard we hold ourselves to: ISO 27001 and Cyber Essentials Plus certified.

The whole lifecycle

From the order to the day it's retired.

  1. 01

    Supply

    Bought through our reseller account, registered to you automatically.

  2. 02

    Deploy

    Zero-touch: configured the moment it is switched on.

  3. 03

    Support

    Apple-certified engineers on the same service desk as everything else.

  4. 04

    Refresh

    Planned replacement cycles, not surprise failures.

  5. 05

    Reassign

    Wiped and handed to the next person, or retired with the data destroyed.

Who does the work

Certified on Apple. Certified on Jamf.

Our Apple engineers hold Apple certification and Jamf 300, and sit on the same service desk as everyone else. Your Macs get the same people, the same response times and the same attention as your Windows estate.

Jamf Professional Partner
  • Apple Business & School Manager reseller
  • Apple-certified engineers
  • Jamf 300 certified engineers

In practice

Apple estates we already run.

FAQs

Straight answers.

Can you manage Macs alongside our Windows PCs?
Yes, and that is most of our Apple work. The same service desk, the same sign-in policy and the same security reporting cover both, so a Mac is never the awkward exception.
Do we need Jamf, or is Intune enough?
If you are mostly Windows with a handful of Macs and iPhones, Intune is often enough. If Apple is a large part of the estate, or you want the deepest macOS control, Jamf Pro earns its keep. Schools with iPads are usually best on Jamf School. We will tell you which, and why.
Can you take over Macs and iPads we already own?
Yes. Devices bought elsewhere can usually be added to your Apple Business or School Manager account and brought under management. We will review what you have and plan the move so nobody loses work.
What about staff using their own iPhones?
Personal devices can be enrolled so work apps and data are managed and separate, without us seeing or controlling anything personal. Company-owned iPhones are fully managed.
How do you handle macOS and iOS updates?
Jamf supports every new Apple release on the day it ships. We test each one on our own Macs first, then set a deadline: users are reminded, the install is tracked, and it is enforced before anyone falls out of compliance. We then check independently that it actually happened.
Can you prove our Macs are compliant for Cyber Essentials or ISO 27001?
Yes. App patching, OS updates and security settings are measured independently of the management tool, and evidence can be exported in minutes, mapped to Cyber Essentials and ISO 27001 controls.
We have Macs but no device management. Where do we start?
With patching and compliance. We can bring unmanaged Macs into app patching, update enforcement and security checks straight away, with audit evidence from the start, then move them onto Jamf when you are ready.
What happens when someone leaves?
Their access is removed centrally, the device is wiped remotely, and it is ready for the next person to switch on and sign in. No reimaging, no lost recovery keys.
Do you work with schools and trusts?
Yes. Jamf School with Apple School Manager, Shared iPad, Apple Classroom and year-group safeguarding policies, installed by DBS-checked engineers, usually in the holidays.
Can you supply the devices too?
Yes. As an Apple Business and School Manager reseller we supply Macs, iPads and iPhones that enrol themselves on first switch-on. You can buy elsewhere and we will still manage them.

Bring us your Apple estate.

A handful of Macs or a whole school of iPads. We'll tell you what we'd change and how we'd run it.

Book an Apple estate reviewModern Workplace ›