Company-owned
Inventory, settings, apps and updates
Lock, lost mode and wipe, where the platform supports them
MDM software for every device your team uses
Set up a new laptop or phone without touching it, apply the same settings to a group of devices, and wipe a company-owned one that gets lost. trio.so does this on Windows, Mac, iPhone, iPad and Android, and manages Linux from the same console.
Example data
DevicePlatformEnrolled throughLast check-in
FIELD-AND-03AndroidZero touch4 min ago
WH-AND-07AndroidSamsung Knox9 min ago
Other platforms · 6
ENG-WIN-12WindowsWindows Autopilot2 min ago
HR-MBA-09macOSAutomated Device Enrollment1 min ago
FIN-IPH-14iOSAutomated Device Enrollment6 min ago
OPS-LNX-02Linuxtrio.so agent1 min ago
SALES-IPAD-11iPadOSAutomated Device Enrollment12 min ago
FIN-WIN-07Windowstrio.so agent3 min ago
2 of 8 devices · Android · each with how it enrolled and when it last checked in
Mobile device management for every platform
trio.so manages Windows, macOS, Linux, iOS, iPadOS and Android devices in one list. ChromeOS is coming soon.
Phones and tablets take commands only. They have no terminal or remote desktop, so the console doesn't show tools they can't use.
Example data
| Platform | How a device enrolls | What you can do remotely |
|---|---|---|
| Windows | Windows Autopilot, or install the trio.so agent | Restart, wipe, run scripts, open a terminal or remote desktop |
| macOS | Apple Automated Device Enrollment | Restart, lock, wipe, run scripts, open a terminal or remote desktop |
| iPhone and iPad | Apple Automated Device Enrollment | Restart, lock, lost mode, wipe |
| Android | Zero touch or Samsung Knox enrollment | Restart, lock, lost mode, wipe |
| Linux | The trio.so agent | Restart, run scripts, open a terminal |
| ChromeOS | Coming soon | Coming soon |
FIN-IPH-14iPhone · company owned
- Enrolled through
- Apple Automated Device Enrollment
- Last check-in
- 6 min ago
Enroll a device before it reaches the user
Enrollment is how a device becomes managed. For company-owned Apple, Windows and Android devices, you can enroll them before they reach the user. The first time the device starts, it joins trio.so and receives your settings. On Linux, you install the trio.so agent.
You don't hand-configure each new hire's laptop. Order the device, assign it, and let the user turn it on.
Example data
Ready to useManaged by Example Co
FIELD-AND-08
HR-MBA-10✓EnrolledmacOS · Apple Automated Device Enrollment
ENG-WIN-15✓EnrolledWindows · Windows Autopilot
FIELD-AND-08✓EnrolledAndroid · Android zero touch
OrderedAssignedTurned onSettings received
Configure settings once, apply them to a group
Configuration is a set of settings you choose once: passcode rules, disk encryption, Wi-Fi and the apps you want installed. You apply it to a group of devices, and each device reports whether it applied.
You see which devices applied the settings and which did not. The ones that failed list a reason.
Example data
Passcode rules6 digits or more
Disk encryptionOn
Wi-FiExample-Office
Apps3 apps to install
Applied to All staffGroup · 6 devices
HR-MBA-09Applied
ENG-WIN-12Applied
FIN-IPH-14Applied
SALES-IPAD-11Applied
FIELD-AND-03Applied
WH-AND-07Failed
WH-AND-07: the Wi-Fi setting was not applied. The device reported an error.
5 of 6 applied · 1 failed, reason shown
Dedicated devices for shared use
A dedicated device runs one app or a short list of apps and nothing else. Use it for a front-desk tablet, a shop-floor scanner or a lobby display. Kiosk mode works on Windows, macOS, iOS, iPadOS, Android and Linux.
Example data
Visitor check-inThe only app on this device
Single app- Windows
- macOS
- iOS
- iPadOS
- Android
- Linux
When a device goes missing
What you can do depends on the platform, so trio.so shows only the actions a device supports.
| Platform | Lost or stolen device |
|---|---|
| iPhone and iPad | Turn on lost mode, lock, or wipe a company-owned device |
| Mac | Lock (the Mac restarts and asks for a 6-digit PIN), wipe, or mark it lost or stolen |
| Windows | Wipe, or mark it lost or stolen. Windows has no remote lock |
| Android | Lock, turn on lost mode, or wipe. On a work profile, lock covers the work profile only |
| Linux | Mark it lost or stolen |
A wipe works on company-owned devices only. When you lock a Mac, trio.so shows you the PIN. Keep it, because the Mac needs it.
Example data
Enter the 6-digit PIN
DSGN-MBP-04
✓LockedThe Mac restarted. PIN to keep: 482 913
When you lock a Mac, trio.so shows you the PIN. Keep it, because the Mac needs it.
Personal phones get fewer controls
Some employees use their own phones for work. trio.so treats a personal device differently from a company-owned one.
Personal
It can sync inventory, and on Android it can lock the work profile.
It can't wipe a personal device.
Four jobs every MDM tool does
Day to day, MDM tools come down to four jobs. On Windows, macOS, iOS and Android, trio.so covers all four. Linux devices enroll with the agent, run scripts and open a terminal; see the table above.
Enroll a new device
Configure it with the same settings as the rest
Update its operating system and apps
Wipe it when someone leaves or a device is lost
After MDM: Automations and Trio AI
Once your devices are enrolled, you can automate fixes on them. Automations and Trio MCP are in Beta.
Automations
Repeats a routine fix across a group of devices, and each device reports its result.
AutomationsMDM or UEM?
Mobile device management covers phones and tablets. Unified endpoint management covers laptops and desktops as well, with security and compliance on top. trio.so does both in one console, so you can start with devices and add the rest later. Unified endpoint management in trio.so
Phones and tablets
MDM
Covered
UEM
Covered
Laptops and desktops
MDM
Not covered
UEM
Covered
Security and compliance
MDM
Not covered
UEM
Covered
Who it is for
IT teams of any size who manage a mix of Windows, Mac, Linux and phones, and want one MDM platform instead of one tool for each. There is no device minimum. Plans start at $5 per device. See pricing
Questions
MDM stands for mobile device management. MDM software, also called mobile device management software, lets an IT team enroll phones, tablets and laptops, apply settings and apps to them, and lock or wipe a device that is lost.
Mobile device management is how an IT team controls the devices its people use for work. It covers enrollment, settings, apps, updates and what to do when a device is lost.
On company-owned devices, enrollment happens when the device first starts: Apple Automated Device Enrollment, Windows Autopilot, or Android zero touch. On Linux, you install the trio.so agent.
Yes, on company-owned iPhones, iPads, Macs, Windows PCs and Android devices. A personal device can't be wiped.
trio.so gives personal devices a narrower set of controls: it can sync inventory, and on Android it can lock the work profile. It can't wipe them.
Yes. A Linux device enrolls with the trio.so agent, and you can run scripts and open a terminal on it.
Not yet. ChromeOS is coming soon.
No. trio.so manages devices and does not replace endpoint detection and response tools.
Plans start at $5 per device. There is no device minimum. See pricing
Enroll one device and see it in the console
Start a free trial and enroll a laptop or a phone.