trio.so
Apple MDM

Apple device management for Mac, iPhone and iPad

Enroll Macs, iPhones and iPads through Apple Business, set FileVault, passcode and Wi-Fi policies, install apps from Apps and Books, and keep macOS and iOS/iPadOS up to date. All in the same console as your Windows, Android and Linux devices.

Start free trialBook a demo
  • Regional Leader, EMEA, Spring 2025
  • Easiest To Do Business With, Mid-Market, Spring 2025
  • Momentum Leader, Spring 2025
  • High Performer, Middle East, Spring 2025
  • Best Support, Mid-Market, Spring 2025

Rated 4.8 on G2

trio.soHarbor & PineEndpoint Management ›Devices ›DSGN-MBP-04

Devices

Macs, iPhones and iPads in one list, each enrolled through Apple Business

PlatformmacOSApple6
DSGN-MBP-04MacBook Pro 14Automated Device EnrollmentmacOSAutomated Device EnrollmentCompliant1 min ago

DSGN-MBP-04

macOSMacBook Pro 14 · macOS 15.1 · Online

Company ownedMDM and trio.so agent
Owner
Leo Park
Enrolled through
Automated Device Enrollment
Actions
Lock: queued
Compliance · 5 of 5 pass
FileVaultOn
FirewallOn
GatekeeperOn
System Integrity ProtectionOn
OS up to datemacOS 15.1
1 request queued for the device

Apple fleets outgrow Apple-only tools

  • Two consoles for one team

    An Apple-only tool leaves Windows and Android in another console, with another login and another report.

  • Setup by hand

    Without zero-touch enrollment, every new Mac means someone installing profiles at a desk.

  • Sent is not the same as on

    Knowing a profile went out doesn't tell you FileVault is actually on.

How it works

How Apple device management works in trio.so

  1. Connect Apple BusinessLink Apple Business (formerly Apple Business Manager), or Apple School Manager for schools.
  2. Enroll with zero touchDevices assigned to trio.so enroll through Automated Device Enrollment when they're first set up.
  3. Apply policiesChoose from 47 macOS and 30 iOS/iPadOS policy types, and see whether each device applied them.
  4. Keep them currentAuto Patch policies install macOS and iOS/iPadOS updates on the schedule you set.

Enrollment

Zero-touch setup through Apple Business

Connect Apple Business once, and the Macs, iPhones and iPads your company buys enroll in trio.so the first time they're turned on. Devices bought elsewhere can enroll with a link or QR code, and personal devices with account-driven enrollment.

  • Automated Device EnrollmentNew devices arrive managed and supervised, with no one touching them.
  • Apple School ManagerSchools can connect it instead, with Managed Apple IDs, classes and Shared iPad.
  • Personal devicesAccount-driven user enrollment for personal devices: IT can't erase, lock or locate them.

Configuration

Policies for macOS and iOS/iPadOS, with a result per device

Turn on FileVault, firewall and Gatekeeper, set passcode rules and restrictions, and push Wi-Fi, VPN and certificates. Each device reports whether a policy is applied, pending or failed.

  • SecurityFileVault, firewall, Gatekeeper, passcode and screen lock, restrictions.
  • USB storageBlock or limit USB and other removable storage on Macs, iPhones and iPads.
  • NetworkWi-Fi with WPA2 or WPA3, VPN and encrypted DNS.
  • CertificatesPKCS#12, SCEP and root certificates.
  • Backup settingsTime Machine settings on company Macs; allow or block iCloud backup on iPhone and iPad.

Apps

Apps from Apps and Books, the catalog or your own DMG

Buy and assign apps through Apple Apps and Books, add common apps from the trio.so catalog, or upload your own Mac app as a DMG. Every device lists the apps it has installed.

Updates

macOS and iOS/iPadOS updates on your schedule

Auto Patch policies use Apple's declarative management to defer or enforce updates, with a deadline and a local install time. Third-party Mac apps get CVE findings and fixes through remediation plans, with the result shown for each device.

  • Defer or enforceHold major and minor updates for a set number of days, or require the latest version by a deadline.
  • Rapid Security ResponsesAllow Apple's fast security fixes between full updates.

Lost devices

Lost Mode, lock and erase

Put a supervised iPhone or iPad into Lost Mode with a message and a phone number. Lock a Mac with a PIN, or erase a company device. Each action is recorded on the device.

Apple management at a glance

Start free trialBook a demo
47
macOS policy types
30
iOS/iPadOS policy types
Zero touch
through Apple Business
From $5
per device, in every plan

Related

Related device management

Apple device management FAQ

Managing company Macs, iPhones and iPads from one place: enrolling them, applying security settings, installing apps, keeping them updated and acting when one is lost. trio.so does this through Apple's MDM framework and Apple Business.

Devices bought from Apple or an authorized reseller can be added to your Apple Business account and assigned to trio.so. They then enroll automatically the first time they're set up.

Yes. trio.so manages macOS, iOS/iPadOS, Windows, Linux and Android in one console, with the same policies, reports and remote tools.

Yes. Schools can connect Apple School Manager instead of Apple Business, with Managed Apple IDs, classes and Shared iPad.

Yes, with account-driven user enrollment. IT can apply settings and install work apps, but can't erase, lock or locate a personal device, and sees only the work apps it installed.

Auto Patch policies defer or enforce macOS and iOS/iPadOS updates with a deadline and install time, and each device shows its update status.

Plans start at $5 per device, and device management is in every plan. Patch and vulnerability management is in the Secure plan and above. See pricing.