Apple Device Management • ABM / Intune / Jamf

IT Administrator guide for enrolling existing Macs into ABM for Automated Device Enrollment while preserving all user data and settings.

⚠️ IMPORTANT DISCLAIMER:

This procedure involves modifying disk structures and system configurations. While this method is designed to preserve existing data, there is always a risk of data loss when performing disk operations. BACKUP ALL IMPORTANT DATA BEFORE PROCEEDING (using Time Machine or external backups). Proceed at your own risk and only if you understand the potential consequences.

Introduction

If you're a Mac administrator, you've likely encountered this scenario: you have existing Mac computers in your organization that need to be enrolled in Apple Business Manager (ABM) for centralized management, but the conventional wisdom suggests that ABM enrollment requires factory-fresh devices or complete erasure.

Good news: it's possible to add existing Macs to Apple Business Manager without wiping them. This guide walks through a step-by-step process using a temporary volume method that preserves all existing data and configurations.

Why This Matters

Adding your existing Mac fleet to ABM provides significant benefits:

  • Streamlined enrollment: Automatic Device Enrollment (formerly DEP) simplifies the setup process.
  • Persistent management: Devices remain managed even after OS reinstallation.
  • Enhanced security: Management profiles cannot be removed by end users.
  • Centralized inventory: All organizational devices managed in one centralized location.

? Prerequisites

  • A Mac running macOS (works on both Apple Silicon M1/M2/M3/M4 and Intel Macs).
  • Administrator privileges on the Mac.
  • A COMPLETE BACKUP of your system (Time Machine, Carbon Copy Cloner, or similar solution).
  • The Apple Configurator app installed on an iPhone/iPad (iOS device).
  • Access to an Apple Business Manager account with appropriate device management roles.
  • A Mobile Device Management (MDM) solution configured with ABM (e.g., Intune, Jamf Pro).

Step-by-Step Process

1
Create a Temporary Volume
Instead of wiping your entire drive, we will create a separate volume for a clean macOS installation:
  1. Open Disk Utility (Applications > Utilities).
  2. Select your main disk (usually Macintosh HD) in the sidebar.
  3. Click the Volume button in the toolbar (not "Partition").
  4. Click the + button to add a new volume.
  5. Name it Temp Install and select APFS format.
  6. Click Size Options and allocate at least 50GB.
  7. Click Add to create the volume.
? Note for Apple Silicon Macs: Modern Macs use APFS containers that dynamically share space between volumes efficiently.
2
Boot into Recovery Mode
For Apple Silicon Macs (M1, M2, M3, M4):
  • Shut down your Mac.
  • Press and hold the power button until "Loading startup options" appears.
  • Select Options from the menu and click Continue.
For Intel Macs:
  • Restart your Mac.
  • Immediately press and hold Command (⌘) + R until the Apple logo appears.
3
Install macOS on the Temporary Volume
In Recovery Mode, select "Reinstall macOS" and follow the prompts until you reach the disk selection screen:
Select your newly created Temp Install volume.
Click Install and wait for the process to complete (typically takes approx 30 minutes).
4
Boot into the Temporary Volume
The Mac should automatically restart and boot into the new volume. If not:
• For Apple Silicon: Press and hold the power button until startup options appear, then select Temp Install.
• For Intel Macs: Restart while holding the Option key, then select Temp Install from the boot menu.
5
Enroll with Apple Configurator
  1. Launch Apple Configurator on your iPhone (logged in with an ABM administrator/device manager account).
  2. If you're adding a Mac portable, plug the Mac into a power source so it doesn't go to sleep. Connect network cables if using Ethernet.
  3. Start up the Mac and select the language in Setup Assistant, then click Continue.
  4. STOP when you see the Country or Region pane! (Note: You must restart the Mac if you go past this pane).
  5. Bring your iPhone close to the Mac and either scan the circular image in Setup Assistant, or click Pair Manually in the lower-left corner and enter the six-digit code.
Wait for the process to complete until enrollment confirmation appears.
6
Shut Down the Mac
Once enrollment is confirmed on both devices, click Shut Down on the Mac to power it off completely.
7
Assign the Mac to MDM in Apple Business Manager
  1. Log in to Apple Business Manager.
  2. Navigate to Devices in the sidebar.
  3. Locate your newly added Mac by serial number.
  4. Click Edit MDM Server / Assign Device Management and explicitly select your MDM server (even if you have a default server configured).
  5. Save the changes.
8
Verify MDM Sync
Log in to your MDM console (Microsoft Intune, Jamf Pro, etc.). Manually sync with Apple Business Manager if needed, and verify the Mac appears in your device/token list with "Assigned" status.
9
Boot Back to Your Original System
Power on your Mac:
• For Apple Silicon: Press and hold the power button until startup options appear, then select your original Macintosh HD volume.
• For Intel Macs: Hold the Option key and select Macintosh HD.
Your Mac will boot right back to your familiar, original operating system with all user accounts and data fully intact.
10
Complete MDM Enrollment
  1. Log in as an administrator on the Mac.
  2. Open Terminal (Applications > Utilities > Terminal).
  3. Run this command:
sudo profiles renew -type enrollment
Enter your admin password when prompted. A system notification will appear about Device Configuration. Click the notification details and follow on-screen prompts in System Settings to complete enrollment.
11
Delete the Temporary Volume
Clean up the temporary volume to free up disk space:
  1. Open Disk Utility.
  2. Select the Temp Install volume in the sidebar.
  3. Click the - button or select Volume > Delete APFS Volume.
  4. Confirm the deletion.
The storage space will immediately be returned to your main APFS container pool.

Troubleshooting Tips

  • If enrollment fails: Verify your Apple Configurator is signed into an Apple ID with Device Enrollment privileges in ABM.
  • If device doesn't appear in ABM: Wait 15 minutes and refresh; Apple's cloud sync services can sometimes experience minor delays.
  • If terminal command fails: Ensure you are logged into an administrative account and running the command using sudo.

Conclusion & Important Notes

This method allows you to bring your existing Mac fleet into Apple Business Manager without the disruption of wiping devices. It has been verified working on macOS Ventura, Sonoma, and Sequoia. Always remember to test on a non-critical Mac first and maintain complete system backups before proceeding.