Devices that set themselves up the first time they are switched on
A box arrives, a person switches the device on, and it is enrolled, supervised, configured and on the network before they have finished their coffee. Apple through Apple Business Manager, Windows from a provisioning package or an Entra ID join, Android by QR code, Chromebooks through Google Admin.
- Claimed under your organization
- Settings rendered for the platform
- Apps and WiFi certificate issued
- Encryption on, key stored
What you are up against
Why hands-on setup does not scale
Every device is a desk visit
Imaging, profiles and manual settings mean a technician touches each device before anyone can use it, and a September delivery of 400 Chromebooks takes weeks.Remote staff wait
A laptop shipped to a home address sits unused until someone walks the person through setup over the phone.Setups drift
Two devices set up by two people on two days end up different, and the differences surface as tickets months later.
How Purple MDM is set up
How Purple MDM sets a device up for you
- Apple from the boxDevices bought through Apple Business Manager enroll at first switch-on and arrive supervised and configured. On recent devices a person can type their work email in Settings instead.
- Windows at first bootA provisioning package or an Entra ID join sets a new PC up at first boot, holding at the Enrollment Status Page until setup is done.
- Android and ChromeOSAndroid phones and tablets enroll by QR code or zero-touch; Chromebooks connect through the school's Google Admin, keeping its organizational units.
- Everything else by linkEnrollment links and QR codes for anything that does not arrive through a program, and a device list imported from Jamf, Intune or JumpCloud for a fleet already in service.
Sign in to enroll
- Device
- MacBook Air
- Work email
- sam@example.org
- Enroll this device
No links or profiles to send. The device enrolls from the email alone.
The fleet
What a device has when the person first signs in
- Settings and restrictionsRendered from the settings library for its group and platform.
- AppsFrom Apps and Books, MSI and MSIX, managed Google Play or Chrome policy, with no Apple ID on the device.
- WiFi certificateIssued automatically for the company network and renewed before it expires.
- EncryptionFileVault or BitLocker switched on with its recovery key stored.
- Company sign-inEntra ID, Okta or Google on Macs and Windows, so the device's user is the directory's user.
- A compliance verdictChecked before it joins the network, with the reason in a sentence if anything fails.
FAQ
Questions we hear from teams like yours
Do we need to buy devices through Apple Business Manager?
Zero-touch for Apple needs devices in Apple Business Manager or Apple School Manager. Devices bought elsewhere enroll by link, QR code or by a person typing their work email in Settings on recent iPhones, iPads and Macs.
Is Windows Autopilot supported?
Not yet. Windows zero-touch runs from a provisioning package or an Entra ID join today, which sets a new PC up at first boot with no IT visit.
What does the person see during setup?
The platform's own setup assistant, shortened: the screens you choose to skip are skipped, and on Windows the device holds at the Enrollment Status Page until setup is done.
Can a device go to a home address?
Yes. Zero-touch is built for that: the device enrolls from wherever it is first switched on, as long as it has internet.
Other use cases
BYOD and personal devices
A separate work area on personal phones, and a transparency page per person.Device health and network access
Device health feeds Purple Access: a failing device is isolated, fixed and let back.
See every device in one console, on your own fleet
Tell us which devices you run, how many, and what you manage them with today. The Purple team shows you Purple MDM on a fleet like yours: zero-touch enrollment, a change previewed and undone, a failed check explained in a sentence, and a device moved off the network and back. Already a Purple customer? Sign in to the app with your Purple account.
- We map your fleetA Purple expert maps your platforms, your groups and how devices arrive today, and answers your questions on enrollment, data regions, roles and migration.
- You see it on devices like yoursA demo of zero-touch enrollment, a previewed change, a failed check explained in plain English and, with Purple Access, a device moved off the network and back.
- You get your quotePriced per device, per month, for the platforms you run, direct or through your Purple partner, with a move in waves planned if you are coming from another MDM.
Your demo
Tell us your fleet. We show you Purple MDM running it.
A Purple expert comes back to book a demo on devices like yours, from the team behind Purple WiFi and Purple Access.