Apple MDM that lives
where you work.
Purpose-built Apple device management for MSPs. Enrollment, profiles, commands, smart groups, compliance, DEP/ADE, ABM, and VPP. Not a bolt-on to a Windows MDM — built for Apple from the ground up.
Apple device management
See every enrolled Mac, iPad, and iPhone. Filter by customer, Apple model, macOS/iOS version, or enrollment status. Act on individual devices or in bulk.
| Unified device list — All Macs, iPads, iPhones in one table |
| Device detail pages — Hardware, Device Info, MDM Status, Installed Apps panels |
| Customer filtering — Filter by ABM tenant mapping |
| Display name overrides — Inline editor, changes push via MDM Settings |
| Installed applications — Full inventory from InstalledApplicationList |
ArgusBoard MDM — enrolled Apple devices by client
MDM commands
Queue commands for any enrolled device. DeviceInfo, SecurityInfo, ProfileList, CertList, AppList. Destructive actions clearly separated with confirmation prompts.
Commands push via APNs to the device. Lock, wipe, lost mode, clear passcode, activation lock bypass, device rename. Bulk actions supported.
End-to-end command tracking with SQLite persistence. See results come back with status and payload data. Command UUID tracking across queue and result.
ArgusBoard command queue — end-to-end MDM command tracking
Profile builder
Build, preview, and deploy configuration profiles without touching a plist editor. PPPC, Wi-Fi, remote access, notifications, and custom payloads.
| PPPC — 22 Privacy Preferences services. Camera, microphone, screen capture, accessibility, location, 17 more |
| Remote Access — SSH and Apple Remote Desktop. ARD privilege mask mapping |
| Wi-Fi — WPA Enterprise 802.1X. Deploy corporate wireless automatically |
| Notifications — Control macOS notification behavior. BTM suppression |
| Custom — Custom payloads with preview and .mobileconfig download |
Direct device assignment, smart group assignment, and removal. Side-by-side view of assigned and available profiles. Fast re-enrollment check plus hourly full reconciliation — profiles stay consistent even when devices drift.
| Direct device and smart group assignment |
| Side-by-side assigned vs. available profiles view |
| Hourly full profile reconciliation |
| Graceful duplicate identifier handling |
| Hard delete cascades assignments cleanly |
ArgusBoard profile builder — PPPC, Wi-Fi, remote access, and custom payloads
Smart groups
Define device groups using predicates. Smart groups evaluate automatically every 5 minutes so new devices get picked up immediately and profile assignments stay current. Combined with profile reconciliation, your fleet configuration is always converging toward your desired state.
| Predicate-based device grouping |
| 5-minute automatic evaluation cycle |
| ABM tenant smart group support |
| Create and edit with pre-populated conditions |
| Automatic profile deployment on group membership change |
| Combined with re-enrollment reconciliation |
Compliance and discovery
Know the state of your fleet. Daily discovery scans, auto-bootstrap on enrollment, and per-device compliance checks with audit visibility.
| Daily compliance discovery — ProfileList and SecurityInfo at 04:00 UTC |
| Auto-bootstrap on enrollment — Full context from minute one |
| Per-device compliance checks — Policy creation and evaluation |
| Audit log — Every command, profile change, and compliance check |
| Security info — Firewall, FileVault, SIP status, and more |
DEP, ADE, and Apple Business
Zero-touch Apple enrollment from Apple Business Manager. DEP profile builder with full customization. Device assignment and unified device list.
ADE account configuration with auto-send. ABM certificate generation and server token upload. Multi-customer support with per-tenant management.
Setup Assistant polling and DeviceConfigured release. Re-enrollment detection and command re-send. NanoDEP sync engine with platform fallback.
5-step Apple onboarding
Bring a new customer's Apple fleet from zero to fully enrolled in five steps. ABM certificates, server tokens, NanoDEP validation. No guesswork, no missed configuration.
| Step 1: Basics — Customer name, slug auto-generation, tenant derivation |
| Step 2: Support configuration — Support contact details and settings |
| Step 3: ABM certificate — Generate, download, upload to ABM |
| Step 4: Server token — Upload token from ABM, redirect to validation |
| Step 5: Validate — NanoDEP, certificate, and token health check |
Apple VPP app management
Manage Apple Volume Purchase Program apps across your customer base. Onboard existing customers, browse the App Store catalog, assign licenses to Macs, iPads, and iPhones, and track assignments. Customer-scoped filtering means you only see and assign to Apple devices that belong to the right client.
| VPP onboarding wizard for existing customers |
| Unified app catalog with iTunes Store name lookup |
| App detail pages with assignment management |
| Bulk assignment across multiple devices |
| Platform-filtered device assignment (macOS, iOS) |
| Customer-scoped assignment dialogs |
| Real device serial passed to Apple VPP API |
macOS package deployment
Define packages that install automatically on enrollment. New Macs get your standard toolset without manual intervention. All-macOS assignment for fleet-wide scope.
PKG deployment is blocked while a Mac is still in Setup Assistant. No failed installs on half-configured devices. AccountConfiguration auto-sent for ADE Macs.
Packages install once Setup Assistant completes. Re-enrollment retry re-queues packages automatically. Correct sequencing before DeviceConfigured.
Explore more.
Apple fleet management, simplified.
See how ArgusBoard gives your MSP team purpose-built Apple MDM that works standalone or alongside your existing Windows-focused RMM.