Frequently asked questions

MDM/EMM products utilize the same core management interfaces provided by the operating system vendors, such as Apple, Google and Microsoft. As such, they all share similar constraints and deal with similar issues. We cover those issues in this topic.

Can my devices be managed by both solutions at the same time?

All modern operating systems only support a single management profile on the device, meaning that if a device is already managed by one MDM product, it cannot be managed simultaneously by another MDM product. As a result, there is no direct path for automatically migrating devices from one product to another. All devices must be unenrolled from the current MDM system before they can be enrolled in the new one.

How do I prevent data loss when moving between products?

When the management profile or agent is removed from a device, then all data, configurations and apps associated with that profile are also removed from the device. If the device is fully managed, then it may also result in the device being factory reset. Before initiating the unenrollment of the device, it is important to have a strategy in place for dealing with the data.

Our recommendation is to use cloud storage solutions to maintain a synchronized copy of the data in the cloud. This is most easily done using OS-integrated solutions such as Apple iCloud, Google Drive, or Microsoft OneDrive.

On Apple devices, you cannot use the backup and restore function as the restore removes the new management profile, resulting in a device that can no longer be managed.

Do all devices have to be factory reset or wiped?

Company-owned (i.e. fully managed) devices need to be factory reset as part of the migration process. Personal devices are not completely wiped or factory reset, but the items installed through the MDM profile (Apple) or work profile (Android) are removed when the device is unenrolled. See Recommended workflow for the best practices to simplify this process.

How do I migrate my company-owned devices?

Migrating company-owned devices are typically the easiest. The process involves the following steps:

  1. Connect KACE Cloud to the automated enrollment program (Apple DEP, Google ZTE, Samsung Knox, or Microsoft AutoPilot).
  2. Sync KACE Cloud with the programs so the devices show up in a Discovered status within KACE Cloud.
  3. Send a factory reset command to the devices from your previous MDM program.
  4. Complete automated enrollment on the device.

Do the automated enrollment programs support multiple MDM vendors?

Yes, they do. Each OS vendor has a unique process:

  • iOS and macOS: Add a new MDM Server in Apple Business/School Manager, then link that with KACE Cloud.
  • Google Zero-Touch: Simply log into your ZTE portal from KACE Cloud and setup a new enrollment profile.
  • Samsung Knox: Log into your Samsung Knox portal and setup a new enrollment profile.
  • Microsoft AutoPilot: Create a new group for your devices. For more information, see Azure AD domains: Using Windows Autopilot to join new devices