Apple management stack^[[sysadmin (reddit.com)](https://www.reddit.com/r/sysadmin/comments/185v87n/comment/kb49aht/?utm_source=share&utm_medium=web2x&context=3)] - Spare/admin Mac for DFU Restores - Spare/admin Mac for profile testing - [[Apple Business Manager]] setup and configured with all managed Macs enrolled. - Mac MDM (evaluate differences between enterprise tiers) - Macs purchased through Apple (with Apple Customer Number) or Apple Authorized Reseller for automatic enrollment in [[Apple Business Manager]]. - MDM - Managed FileVault with stored recovery key - Storing activation lock bypass code - App repository - JAMF Connect/other for zero touch provisioning - AppleCare/+ ## Policies and Procedures ### Client Facing - Purchasing a new Apple device (MacOS, tvOS, iOS) - Onboarding an existing Apple device - Client onboarding ([[Apple Business Manager]]) ### Internal - Renew Automated Device Enrollment server token # technical steering committee ### Apple Device Management