[chrnola]

> I bet Apple’s own employee issued macs are managed

I thought so too. The Apple retail employee that gave me the demo of the Vision Pro confirmed this. He said the manager at his store had a Vision Pro and wanted to use it with his Apple-issued Mac, which was managed via MDM.

[turquoisevar]

Apple’s MDM is a bit different. It runs through a SSO service called Apple Connect and Apple encourages employees to use their personal Apple ID to link to it instead of creating a separate Apple ID.

It essentially adds a special entitlement to someone’s Apple ID, similar to how a dev gets App Store Connect access added to their Apple ID when they enroll into the developer program.

This makes it so that every MDM device is logged into the personal Apple ID.

[chrnola]

Oh interesting. Might explain why Apple employees aren’t feeling this same pressure. Do you know if Apple’s MDM is the same for their retail and corporate employees?

Also - I’m not super well versed in MDMs, but they seem to come in two general flavors/deployment strategies: bring-your-own-device (BYOD) and manage a fleet of employer-owned hardware.

In my experience, I’ve only ever seen BYOD policies for employee-owned _smartphones_ (e.g. for access to an intranet mail server). I’ve never worked anywhere that permitted employees to use their own _workstations_.