Getting Started with Apple Support & Default Policies

The lifecycle for Apple support encompasses a lot of moving parts. Let's look at what items are similar for those just beginning their journey with Ntiva or expanding their fleet to include Apple devices for the first time.

Apple Business

Everything begins here. An Apple Business account is free to create and is required prior to enrolling any Apple devices in support. Check out our article about Signing up for Apple Business to get your account spun up, followed by How To Invite Ntiva into Apple Business so we can get your enrollment links created. 

Apple Business accounts provide:

• The ability to move forward with Apple device management
• Licensing and deployment of App Store apps to your Apple devices
• The tools to create Managed Apple Accounts for your organization, including domain federation with identity providers like Microsoft, Google, and Okta
• Part one of the puzzle towards supporting Automated Device Enrollment, sometimes called "zero-touch" deployment, for your Apple devices

Apple eCommerce Storefront

The Automated Device Enrollment workflow begins with how you purchase your devices. We strongly recommend working with Apple and us to create a free eCommerce Storefront for your organization. You can think of it like your own, customized Apple Store. To begin this process, contact your account manager - we need to get you connected with the correct department at Apple via email to begin the process.

Apple eCommerce Storefronts provide:

• A customized purchase portal with Apple for the purchase of new devices
• The ability for Ntiva to help you create template purchases that can include specific hardware configurations, accessories, AppleCare, and more
• Permission for Ntiva's procurement team to create purchase orders for your approval
• Part two of the puzzle towards supporting Automated Device Enrollment, sometimes called "zero-touch" deployment for your Apple devices

Enrolling your Apple Devices

Once these accounts are created, it's time to enroll your fleet. Once you have your enrollment links in hand, here are guides on how to enroll your Macs and iPhones/iPads. If you're enrolling some Macs, here's what to expect on your device after enrollment. If you're purchasing new devices, you won't need to worry about manual enrollment. If your devices were sourced through your eCommerce Storefront, they'll register with your Apple Business account during setup and automatically enroll in management.

Default Policies

Depending on the type of devices you're enrolling, a few default policies will be in place. 

Default Mac policy settings include:

• Organization-specific admin account
• FileVault - portable devices only
  • Includes FileVault Permissions Repair notifications
  • Clients can request desktops as well, but we default to leaving those unencrypted
• macOS Software Update automation (not upgrades, just updates)
  • Includes deferral of new major upgrades (2026: 45 days)
• 3rd party patching with notifications - default apps include:
  • Adobe Acrobat Reader DC
  • Google Chrome
  • Mozilla Firefox
  • Zoom
• Silent updates for Microsoft Office apps
• SupportMenu and MacManage
• Other Ntiva service apps based on agreement:
  • SentinelOne
  • Cisco Secure Client + Umbrella Module
  • SkyDataVault Endpoint Backup Manager
• Splashtop for remote assistance from the Support Desk

Other auto-install apps and configured settings can be deployed as needed. Note that some requests may be support tickets if they're easy to deploy, but more complex apps or integrations (like Addigy Identity) will require a project. Vision-Bot access is recommended, but optional.

Default iOS policy settings include

• Automated iOS Software Updates and upgrades (45-day deferral for major operating systems)
• Splashtop SOS for remote assistance from the Support Desk

Preparing for the future

With all of this architecture in place, you can begin planning for what comes next. Reach out to your account manager to discuss future changes, including deploying productivity or endpoint protection software, standardizing settings amongst your devices, or getting your Vision-Bot account set up to get helpful, at-a-glance information about your Apple devices.