To ensure the security of institutional data and compliance with NIST 800-171, all ITS-managed, college-owned Apple macOS devices are enrolled in and managed through an enterprise-grade Mobile Device Management (MDM) solution.
What MDM Does
Our ITS enterprise-grade MDM solution is used to remotely manage, secure, and monitor all institutional Macs. It enforces security policies, deploys applications, and manages device configurations across the fleet.
Security Features
- Full disk encryption: All devices use FileVault encryption automatically
- Remote lock and wipe: If a device is lost or stolen, ITS can remotely lock or erase it
- App management: Only approved, security-vetted applications are installed on institutional devices
- Compliance monitoring: Continuously checks device health and flags non-compliant configurations
- Software update management: macOS updates are deployed automatically or scheduled for minimal disruption
Deployment Features
- Initial setup: New devices are pre-configured with your department's standard software and settings
- Automated provisioning: Simply power on and sign in with provided credentials.
- Bulk management: ITS can push configuration changes to entire groups of devices simultaneously
What MDM Manages vs. What It Doesn't
MDM Manages
- Device-level security settings
- Institutional app installations
- macOS update deployment
- FileVault encryption enforcement
- MDM profile configurations
- Network and VPN profiles
MDM Does NOT Access
- Your personal files or documents
- Browsing history or activity
- Personal emails or messages
- Personal device data
- Passwords or credentials
- Camera or microphone feeds
For End Users — What You Will See
- MDM profile in System Settings > Profiles
- Periodic prompts to install macOS updates
- "This device is managed by your organization" — this is normal and expected