macOS MDM Supervised Mode

[ifriedman]

For MacOS, what are the practical differences between MDM in Supervised mode versus unsupervised?

What are the methods for enrolling with Supervised mode?

 

[bogdanw]

"Supervision generally denotes that the device is owned by the organisation, which provides additional control over its configuration and restrictions."
https://support.apple.com/guide/deployment/dep1d89f0bff/web

Some configuration values are only available for supervised devices.
Example
allowEraseContentAndSettings
“If false, disables the Erase All Content And Settings option in the Reset UI. Requires a supervised device. Available in iOS 8 and later, and macOS 12 and later.”
https://developer.apple.com/documentation/devicemanagement/restrictions

You need a MDM server
https://www.kandji.io/apple-mdm-definitions/what-is-an-apple-mdm-server/
MicroMDM - a devops friendly MDM server
https://github.com/micromdm/micromdm
NanoMDM
https://github.com/micromdm/nanomdm