Macs and iPhones arrived in the workplace one department at a time, and most management tooling still treats them as an exception. They should be inventoried, metered and licensed on exactly the same terms as everything else you own.
Windows still dominates the workplace, but Apple has made steady inroads at both the desktop and the mobile end. macOS and iOS devices are now a normal part of the fleet rather than an oddity.
It usually starts as an isolated island. Design teams get Macs. Executives like the look of an iMac. Then a bring-your-own-device policy arrives and iPhones start being used for work in numbers nobody planned for.
However it happened, once those devices are doing work they need managing — because an unmanaged device is a security exposure, and an uninventoried device is a licence liability. Neither problem announces itself. Both surface at the worst possible moment.
The historical difficulty was that Apple desktops fell between two stools.
Tools built for Windows did not cover them properly. Tools built for Apple were mostly designed for the iPhone and then extended upwards to desktops — which meant they inherited assumptions from phone management, such as self-enrolment and lightweight device controls, that do not survive contact with several thousand corporate workstations.
The result was a gap in the functions that actually matter for asset management: hardware and software inventory, software usage metering, application access control, software asset management and licence optimisation. Organisations ended up with a well-managed iPhone fleet and a Mac population nobody could describe.
That gap is a solved problem now, and it is worth being specific about how.
In CerteroX ITAM, macOS is one of six operating system families — alongside Windows, Linux, IBM AIX, HP-UX and Oracle Solaris — served by the same native inventory agent, the same inventory cycle and the same licence engine. There is no Mac module, no separate console and no reconciliation step, because there is nothing to reconcile: every discovery method lands in one schema.
What that gets you in practice:
iOS and Android devices are managed from the same platform, including Apple Device Enrolment Programme support for zero-touch enrolment of corporate-owned hardware. The App-Centre self-service portal, with manager approval chains, gives users a sanctioned route to the applications they need across device types.
The point is not that mobile device management exists — it exists everywhere. The point is that it sits alongside the desktop inventory, the software recognition and the licence position, under one data model. Unified endpoint management stops being an integration project when the endpoints were never in separate systems to begin with.
The Mac question used to be entirely about devices and installed software. It is not any more.
A large share of what a Mac user runs today is not installed on the Mac at all. It is SaaS, reached through a browser, bought on a card, and invisible to any device inventory no matter how good the agent is. CerteroX SaaS Management covers that with three converging signals — identity provider sync, vendor connectors and a browser extension — which is how you find the applications a device inventory structurally cannot see.
So the honest answer to “how do I manage my Apple devices” now has two halves. Inventory and licence the hardware and the installed software on the same terms as everything else you own. Then find the SaaS and the AI tools running on top of it, because that is where the spend and the data exposure have quietly moved.
To see Macs and iOS devices inventoried and licensed in the same record as everything else, book a demo.
Other posts covering the same ground.
End of support is not really a patching problem, it is an inventory problem. Written ahead of the January 2020 cut-off, the argument holds for every deadline since: you cannot remediate the machines your asset register has never seen.
A working introduction to the hardware life cycle — plan, acquire, commission, maintain, retire — and what an ITAM platform has to do at each stage to be worth having.
Agent-based discovery and agentless discovery each fail in places the other covers. The useful question is not which one to buy, but whether your tool can run both against one data model.
Everything argued above is checkable. Name the publisher, the billing account or the platform you would argue with, and the session is built around it — the reasoning attached, not a summary slide.
No gated download at the end of it.