Practical administration.
WHAT TO ESTABLISH
Who owns the devices How they are enrolled and configured How software is deployed How they are secured How they are recovered or wiped
WHAT TO STANDARDISE
The operating system version supported The application set Security settings
WHAT TO CONFIGURE ON EVERY MACHINE
Disk encryption Automatic screen lock Automatic updates A standard account for daily use Backup
WHAT TO RECORD FOR EVERY DEVICE
Serial number Assigned user Purchase date and warranty status Encryption recovery key, stored securely
WHAT TO PLAN
Onboarding and offboarding procedures.
WHAT OFFBOARDING MUST INCLUDE
Removing the device from the user's account Erasing it Confirming activation lock is cleared
WHY THAT LAST POINT MATTERS ENORMOUSLY
A device left locked to a departed employee's personal account is unusable.
WHAT TO ESTABLISH AS POLICY
That work devices are enrolled with organisational accounts, not personal ones.
WHAT TO AVOID
Devices bought individually and never recorded.
