Field notes on MDM.
Every OSH post tagged MDM: practical write-ups from real engagements, not vendor decks.
Everything filed under MDM
Posts from OSH engineers working in MDM. Migrations that went sideways, configurations we have learned the hard way, and the practical decisions worth writing down.
A Practical Guide to Mac Compliance with Hexnode and Intune
How to enforce real Mac compliance with Hexnode or Intune in 2026: FileVault, screen lock, OS updates, PPPC, ABM enrolment and the gaps to …
Read field noteHexnode vs Intune: Choosing the Right MDM for Mixed Apple and Windows Fleets
Hexnode or Intune for a mixed Apple and Windows fleet in 2026? Honest, ZAR-priced take on Conditional Access, Apple parity, ChromeOS and …
Read field noteHow to Manage BitLocker With Hexnode
How to manage BitLocker through Hexnode in 2026: TPM 2.0 prerequisites, XTS-AES policy, recovery-key escrow, Autopilot trade-offs and the …
Read field noteHow to Manage FileVault With Hexnode
How to set up FileVault in Hexnode: policy fields, personal recovery key escrow, Apple Silicon Bootstrap Token, deferred enablement, key …
Read field noteLocking Down Windows Devices With Password and Screensaver Policies via Hexnode
How to set sensible Windows password and screensaver lock policies in Hexnode in 2026, NIST-aligned, with the lockout and GPO conflict …
Read field noteManaging Windows Update and Settings From Hexnode
How to drive Windows Update for Business, deferral policies, reboot windows and the wider Windows settings catalogue from Hexnode without …
Read field noteQR Codes for Device Enrolment: Yes or No?
QR codes for device enrolment: yes for non-touch corporate Android and Windows BYOD, no for sensitive scenarios where SAML SSO and DEP are …
Read field noteGot a mdm problem we haven't written about?
If you are stuck on something we have not covered, tell us. The next field note is usually a client question we did not have a tidy answer for yet.
