Learn about Kandji and its capabilities.
Overview
You’ve chosen Apple, and we’ve designed a device-management experience to match. Kandji is an MDM worthy of your Apple devices.
Drawing on decades of experience in Apple IT, we saw a dire need for a device management platform that could accommodate growing businesses and increasing regulatory demands. Existing solutions were either overly simplistic or mind-numbingly complex and didn’t meet the needs of today's organizations. We knew there had to be a better way—so we built Kandji.
Setup, visibility, and the most extensive library of pre-built controls—Kandji makes device management beautifully simple and insanely powerful, the way it should be. For more information, see our articles on device requirements and accessing Kandji support.
How it works
There are two primary components to Kandji: the Kandji web app and Kandji’s proprietary macOS Agent. The web app is used to configure, review, and report settings on enrolled devices. The Kandji Agent enforces settings, remediates discrepancies, and reports data back to the web app. Both components also have many other capabilities.
Web App
- Specify and configure parameter variables.
- Generate Blueprints and Kandji installers that allow specific Parameters to deploy to Mac computers.
- Review automatically generated alerts when action is required.
- View details about enrolled devices.
- Switch devices from one Blueprint to another.
Agent
- Regularly checks in with Kandji servers.
- Verifies Parameters.
- Remediates any Parameters that do not match the Blueprint configuration.
- Reports enrollments, check-ins, and remediations to the Kandji web app.
- Runs the last Blueprint configuration received if the Mac is offline.
Key Kandji Components
Parameters
- Individual settings deployed via Kandji to any enrolled Mac are known as Parameters. Some Parameters are as simple as Disable Screen Sharing. More complex Parameters, such as disabling specific system preference panes, may require specified variables.
- Some Parameters are available only for certain devices, hardware, or OS versions.
Blueprints
- A collection of Parameters that can be deployed to Mac devices, Blueprints are flexible and open to be used however they best fit your company.
- You can use Blueprints to specify different Parameters for your organization's specific departments (Design, Finance, and so on).
- You can also create Blueprints that adhere to specific compliance standards (such as CIS or HIPAA).
Having a "testing" Blueprint is a great way to verify your configuration works before deployment.Alerts
- Certain Parameters will trigger alerts to keep you informed of actions that are required. For example, you can receive an alert if a Mac does not have FileVault enabled.
Activity
- View the entire history of your fleet or a single Mac using the Activity page. Kandji keeps detailed records every time Mac devices enroll, check in, or are remediated, making auditing painless.
Ready to get started? Click here to request a demo.