08 · MDM & Configuration Profiles
MDM and Configuration Profiles for Mac Hardening
How MDM, Automated Device Enrollment, supervision, configuration profiles and Declarative Device Management fit together to enforce a macOS security baseline.
Read
How MDM, Automated Device Enrollment, supervision, configuration profiles and Declarative Device Management fit together to enforce a macOS security baseline.
How FileVault really works on Apple silicon and T2 Macs, how to enable and escrow recovery keys with fdesetup and MDM, and how to lock down startup security.
How macOS TCC protects Full Disk Access, Screen Recording, Accessibility and more, and how to audit, reset and manage grants with PPPC profiles.