WelpIGaveItSome t1_j6mb1ix wrote on January 31, 2023 at 9:50 AM

Well this is exactly why mac based companies hammer it in to NEVER sign into your apple ID unless your someone important and 9.9 times out of 10, you aren’t.

Kandji and JAMF also have features that disable app store and the ability to sign into AppleID for this exact reason. This is probably a big problem at resellers but for most companies not as much.

Plus if this is a corporate laptop, your local apple store (or the tech) can just wipe the hard drive and bypass most of this anyways. I don’t see how activation lock is a problem as long as the user doesn’t treat their work Mac like a personal computer.

TraitorMacbeth t1_j6mjlfu wrote on January 31, 2023 at 11:44 AM

Regular drive wipes don’t fix activation lock

WelpIGaveItSome t1_j6mmfbl wrote on January 31, 2023 at 12:16 PM

This article says 2020 macs, if your scrubbing the hard drive properly M1’s allow bypass cause your reinstalling the computer.

Intel macs will give you a hassle which yeah your e-wasting them regardless cause butterfly clip keyboards suck

tomistruth t1_j6mc9q8 wrote on January 31, 2023 at 10:08 AM

I am not familiar with that problem but have a company where employees use macs. Can you expand on what you said a bit? Does this affect all newer models? How are you installing apps if you don't sign with your appleid?

joeyicecream t1_j6mig17 wrote on January 31, 2023 at 11:31 AM

If you register it with your Apple ID it’s going to require your Apple ID to unlock it.

Also he’s a bit wrong about this as well, if you send a remote wipe to a corporate Mac it’s going to be activation locked by whoever registered it initially.

WelpIGaveItSome t1_j6mmu8g wrote on January 31, 2023 at 12:20 PM

Why would you remote wipe a mac? Either they send it back to their IT department for wiping or the laptop is being declared lost.

Hell you don’t remote wipe macs at all cause if the user isn’t an admin, incompetent or something going wrong with partitioning theres nothing anyone can do cause I can’t remote into the computer.

joeyicecream t1_j6mors6 wrote on January 31, 2023 at 12:40 PM

Ok I was a bit wrong in my understanding of the issue. If you read the article it says that you wipe the Mac and then it twitters unlocking at the next setup. Big corps are wiping them and selling them off in large batches.

When the refurbishing company gets them and tries to set them up they’re unable to get past that step.

Even a step beyond that I prefer that hard drives are totally destroyed depending on what the device was used for.

WelpIGaveItSome t1_j6mmacy wrote on January 31, 2023 at 12:14 PM

Depending on your MDM (Mobile Device management) environment or lack of thereof you can either grab the .dmg and install things manually or preload software on the mac through a process known as “imaging” since every company requires a specific set up for employee computers UNLESS your a small company where you don’t have a dedicated IT department then everything changes.

Now there are 2 popular MDM solutions for Mac (Windows is a different beast) which is either JAMF or Kandji which can help preload software onto the computer through “0 touch” which preassigns the admin account and allows the computer to download everything the user will need a base level or loading the MDM profile manually, which will be required at some point.

With these 2 MDM solutions you can also disable app store cause you should never be signing into apple ID on company property unless your the CEO… which at that point i don’t care.

Corporate IT works differently from local store side IT, a lot more back doors or direct connections to apple to solve these issues. And i can go into detail about Kandji and JAMF but I’m not JAMF certified and only demo’ed Kandji

stickmanmeyhem t1_j6nxn7z wrote on January 31, 2023 at 5:51 PM

As long as the devices haven't been released from the Apple Business Manager account for the organization, IT can disable both User-Initiated (Locked to a user's personal Apple ID) and MDM-Initiated (Locked to the ABM Apple ID) Activation Lock. That's not a good reason to stop users from logging in to their personal Apple IDs on the devices. Most of my org's user-assigned macs/iPads allow the user to log in to their personal Apple ID, and I've never once had trouble disabling the Activation Lock--even if the device was wiped before disabling it.