Description
Full Lifecycle Management of Mac Endpoints
IT administrators don’t have to learn much about macOS to manage it—our solution transcends existing processes and skillsets. Manage Mac computers and software discovery, distribution, updates and inventory just like PCs.
Mobile Device Management (MDM) for Apple
Easily enroll iPhone and iPad devices and secure them with the help of Configuration Profiles without having to use an additional solution for managing mobile devices. Leverage familiar workflows in the Configuration Manager for creating iOS inventory reports.
Streamline Processes and Improve Workflow
Without the right tools, Apple computers and mobile devices take up a disproportionate amount of IT support time compared with Windows PCs. Optimize IT resources by administering your entire fleet of devices and applications in a centralized manner.
Common Use Cases
View some of the common use cases for Parallels® Device Management (previously Parallels Mac Management)
Discovery and Enrollment of Apple Devices
With task sequences it’s possible to join Active Directory (AD) domains, install applications, execute scripts and install configuration profiles with support for variables. Speed up the creation of task sequences with easy copying and pasting.
One Central Inventory of Windows PCs and Apple Devices
Have the same view on all devices in one place; different endpoints are just device collections in Microsoft Endpoint Manager. Stay focused on managing devices and not enterprise mobility solutions themselves.
macOS and iOS Device Compliance
Enforce compliance on Apple devices via MECM configuration items and baselines. Configuration profiles for Mac computers and Apple mobile devices, FileVault 2 encryption and scripts for Mac. Monitor compliance for macOS and iOS via native reporting.
Leverage Task Sequences
With task sequences it’s possible to join Active Directory (AD) domains, install applications, execute scripts and install configuration profiles with support for variables. Speed up the creation of task sequences with easy copying and pasting.
Learn more about Parallels Device Management (previously Parallels Mac Management) in our Resources section.
Explore information relating to PC, Mac and Apple device management in our white papers, case studies, infographics and videos.
Extend Microsoft Endpoint Configuration Capabilities to macOS and iOS
Flexible Enrollment for Mac and Apple Mobile Devices
With Parallels Device Management there are multiple enrollment options for Mac and Apple mobile devices, including:
- Active Directory System Discovery: Find and enroll the Mac computers and devices joined to the AD domain with ease.
- Apple Device Enrollment Program: Zero-touch device enrollment, configuration, and a simplified setup experience.
- User-Initiated MDM Enrollment: Enroll Mac, iPhone and iPad in MECM and MDM instantly using the enrollment URL.
- All Apple Devices in Configuration Manager: Easily manage mobile devices, including configuring profiles, collections, reporting, lock and wipe.
Comprehensive Inventory
Enjoy unified endpoint management that has all types of devices in one place, and offers MECM administrators a coherent view on Windows, macOS, iOS and iPadOS device collections.
- Inventory reports for Mac: Gather information and generate reports on hardware, applications, encryption status, user logons and custom inventory.
- Inventory reports for Apple mobile devices: Generate reports on hardware and software important for security and accountability.
- Software metering for Mac: A simple way to know the needs of employees and identify the risks for the company.
- Custom inventory for Mac: Gather virtually any information for flexible asset management.
Security Compliance Enforcement
Parallels Device Management has a number of security and compliance protocols.
- Lock or wipe managed Mac computers and Apple mobile devices remotely
- Deploy Configuration Profiles to macOS and Apple mobile devices
- Enjoy easy-to-use macOS/iOS configuration profile editor
- Use MECM task sequences like you do with PCs
- Enable FileVault 2 full-disc encryption
- Leverage centralized FileVault 2 private keys management
Software Deployment and Patch Management
- macOS software deployment via MECM packages and applications
- macOS update management and reporting
- Apple Volume Purchase Program (VPP) application deployment
- Self-service application portal for Mac end users
Hardware and Software Management
- MECM Software Metering for macOS applications
- Hardware and software inventory reports for macOS and iOS
- User logon information reports
What’s New in Parallels Device Management 9
The latest version helps increase the productivity of IT administrators and improves the end-user experience by:
- Further simplifying the enrollment of Mac and Apple mobile devices
- Introducing a new, powerful profile configuration editor
- Making it easier to deploy mobile Volume Purchase Program (VPP) applications
- And so much more!
Aside from a whole host of great new features, we’re excited to announce the product name change from Parallels Mac Management to Parallels® Device Management–reflecting the inclusion of iOS and iPadOS mobile devices.
VPP Applications for Apple Mobile Devices
VPP makes it straightforward for organizations to purchase, distribute and manage their apps in bulk. With Parallels Device Management 9, IT administrators can streamline the deployment of VPP apps to employees’ Apple mobile devices, which improves productivity and end-user experience. Simplify mobile application delivery with centralized administration and easily assign apps to relevant users.
VM Upload and Transfer
Apple DEP, now part of Apple Business Manager, helps organizations easily deploy iOS and macOS devices remotely. Using DEP functionality, Parallels Device Management 9 makes it straightforward to enroll Apple mobile devices to Microsoft Endpoint Configuration Manager (MECM). IT administrators can make the most of zero-touch configurations by supervising devices without touching them.
User Account Configuration during DEP enrollment
Enhance Mac manageability and security by creating and configuring local management accounts, which allow IT administrators to perform management tasks remotely. Administrators can specify the type of local user account for Mac computers and Apple devices during DEP enrollment while also restricting certain accounts.
Installing Configuration Profiles during DEP enrollment
Configuration profiles are useful when needing to configure a large number of devices and contain numerous settings, such as restricting device features, email server settings and credentials. Parallels Device Management 9 reduces the time required for initial device configuration and improves the deployment experience for macOS and iOS end-users.
Powerful Configuration Profile editor
Parallels Device Management 9 introduces the powerful iMazing Profile Editor, integrated directly into the MECM Console. Administrators no longer need to switch to another editor on a different system to create and modify configuration profiles but can do so directly in the MECM Console. This saves significant time and boosts productivity.
User-initiated Mobile Device Management (MDM) enrollment for Mac
Simplify the enrollment of Mac computers and Apple devices to MECM with user-initiated MDM enrollment using a simple web-interface—IT admins simply provide Mac users with the URL to a web form that guides the user to enroll in MECM. This is a more straightforward alternative to Microsoft’s Internet-Based Client Management (IBCM) enrollment.
Executing Task Sequences during DEP enrollment
Task sequences are used to automatically perform tasks in MECM. Parallels Device Management 9 enables IT administrators to choose and execute task sequences immediately after DEP deployment, reducing the time to configure devices and improving the deployment experience for Mac users.
Automatic Assignment of Default DEP Profiles to New Devices
Parallels Device Management 9 simplifies the management of DEP devices by creating a single enrollment profile, which is a collection of DEP settings assigned to registered devices. Administrators can configure the device enrollment profile to automatically assign it to newly purchased Mac and Apple mobile devices by default.
Ability to Edit DEP Profiles
By leveraging Parallels Device Management 9, administrators can edit and make changes to existing DEP profiles. All assigned Mac computers and Apple devices get the updated profile–there is no need to create new profiles and reassign them. This optimizes IT workflow, enabling administrators to focus on other business-critical tasks.
Enhanced Apple Mobile Device and Mac Management
Streamline and unify the endpoint administration of Apple mobile devices and Mac computers with a powerful set of capabilities.
Easily Enroll and Manage Mac
Enable Mac management beyond native Microsoft MECM functionality to discover, enroll and manage Mac devices the same way you manage PCs. Make Mac computers first class citizens on your corporate network. Includes Apple DEP support for zero-touch deployments, image deployment, patching and much more.
Apple Mobile Device Management (MDM)
Enroll iOS and iPadOS devices in MECM and secure them with Configuration Profiles for managing Apple Mobile Device collections without having to use any additional solutions. Leverage familiar workflows in the Configuration Manager for creating iOS and iPadOS inventory reports.
iMazing Profile Editor
The Profile Editor is integrated directly into the MECM Console and administrators no longer need to switch to another editor on a separate system to create and modify configuration profiles. Now, they may do so directly in the MECM Console, saving significant time and boosting productivity.
Apple Software Update Management
Deploy Apple and macOS software updates in the same way as Windows devices, thanks to integration with Windows Server Update Services (WSUS). By leveraging this functionality, administrators can import Apple and macOS software updates into MECM and then deploy them to managed Mac and Apple mobile devices.
Configuration Manager Admin Console
Extend the Configuration Manager console with support for Mac computers and Apple mobile devices. The Configuration Manager console is the primary interface and specific GUI elements are integrated into the console, enabling quick and efficient task management.
Hardware and Software Inventory
Hardware and software information is collected from enrolled Mac, iPhone and iPad devices on a scheduled basis and saved in the Configuration Manager database. If needed, administrators can also perform a manual (unscheduled) inventory update from the Configuration Manager console or directly from a managed device.
Device Collections
Configuration Manager collections help IT administrators to efficiently manage and organize resources by combining them into logical groups based on a certain criteria, including Mac computer collections and Apple mobile device collections. Collections are used for tasks such as managing applications, deploying compliance settings or installing software updates.
Report User Logon Information
Mac user logon details are reported by the Parallels Mac Client to SCCM and are saved in the hardware inventory. The logon information includes reports on general computer information along with names of currently logged on users, existing local user accounts and the user who spends the most time logged on to the console.
Software Metering
Software metering is used to monitor and collect software usage data from managed Mac computers. It’s a simple way to know the needs of employees and identify any potential risks for organizations. The metering covers which software titles are actively used, and which titles cause problems, present as unauthorized software and contribute to licensing counts.
Use Cases
Streamline Apple Mobile Device Management
- Centrally administer Apple mobile devices along with Windows devices directly in Microsoft Endpoint Configuration Manager (MECM)
- Easily enroll and manage all iPhone and iPad devices in your organization
- Straightforward to enforce compliance using Configuration Profiles
Features for Apple Mobile Devices
A cost-effective, on-premises solution for managing iPhones and iPads in organizations
User-initiated Enrollment with MDM
Simplify the enrollment of Apple devices to MECM with user-initiated Mobile Device Management (MDM) enrollment. IT admins simply provide a link to a web form that guides the user to enroll in MECM.
DEP Enrollment
Efficiently enroll Apple mobile devices to MECM with zero-touch configuration using Apple Device Enrollment Program (DEP) functionality. IT teams can remotely prepare enrollment profiles for numerous company-owned mobile devices without having to configure them one at a time, on-site.
Mobile Device Inventory Reporting
Easily access the comprehensive Apple mobile device inventory the same way as Mac computers. Configure the scheduled retrieval of Apple mobile device inventory in MECM and retrieve device information, which can be used for generating reports and creating targeted device collections.
Deployment of Configuration Profiles
For organizations that want to manage and configure collections of Apple mobile devices in MECM, it’s straightforward to enforce compliance with Configuration Profiles, following the familiar workflow used for Mac computers.
VPP Applications
IT administrators can streamline the deployment and installment of VPP apps to employees’ Apple mobile devices, improving productivity. With centralized administration in MECM, it’s simple to assign required apps to users.
Installing Configuration Profiles During DEP Enrollment
Reduce the time required for initial device configuration and improve the deployment experience for mobile device users. Administrators choose which Configuration Profiles will be installed immediately after DEP enrollment.
Automatic Assignment of Default DEP Profiles to New Devices
Simplify the management of DEP devices by configuring an enrollment profile that is automatically assigned to new devices. Administrators can easily configure the default devices enrollment profile, which is then automatically assigned to all new devices.
Remote Lock / Wipe
Prevent corporate data loss by locking or wiping devices remotely when lost or stolen. When required, administrators can initiate the remote lock or conduct a complete wipe for a breached device.
De-enroll Apple Mobile Device
When Apple mobile devices require retirement or a user leaves the company and either returns their device or no longer needs access to company resources from their personal device, administrators may quickly perform a de-enrollment of devices from MDM and MECM.
Parallels Device Management
Centrally administer PCs, iPhones and iPads, including Mac management, with a simple plug-in.
