Getting Started - Enrolling Devices

By Corey Willis

Use this guide to begin testing your Blueprints by enrolling your devices in Kandji


We strongly recommend testing your Blueprints on specific testing devices, not in your production environment. This is a great way to verify your configuration works before deployment.

Kandji recommends the following testing checklist:

  1. Removal of current MDM (if applicable). Once the previous MDM profile is removed, ensure company devices can still connect to Wi-Fi.
  2. Testing of all desired security settings.
  3. Rigorous testing of app compatibility for all teams whose devices you will be enrolling in Kandji.

Enroll Devices

Adding devices to Kandji through Automated Device Enrollment with Apple Business Manager is easy to set up, and can create true zero-touch deployment for your fleet. To configure device setup, follow the steps in the next two sections.

Section 1: Individual Device Assignment

  1. Log in to Apple Business Manager and select Devices from the left-hand navigation bar.
  2. Search for a device in the search field.
  3. Select the device from the list.
  4. Click Edit MDM Server.
  5. Select Assign to the following MDM and choose the Kandji server you created when enabling MDM with Kandji.
  6. Select Continue.
  7. Confirm that you want to change the MDM server the device is assigned to.

Section 2: Default Device Assignments

  1. Select your name from the left-hand navigation bar.
  2. Select Preferences.
  3. Select MDM Server Assignment.
  4. Under Default MDM Server Assignment, select Edit.

  5. Choose the Kandji server you created when enabling MDM with Kandji for each device type.

Automated Device Enrollment Library Item

For zero-touch deployment, an Automated Device Enrollment Configuration allows you to manage specific options during Setup Assistant for Mac, iPhone, iPad, and Apple TV.

For more details about the Automated Device Library Item, click here.

Enrollment through the Kandji Enrollment Portal

  1. Navigate to Add Devices in the left-hand navigation bar of the Kandji web app.
  2. If the Enrollment Portal is set to active, you will have a custom Enrollment Portal Link you can provide to your user so they can enroll their devices.
  3. Provide the user the custom Enrollment Portal Link and the Enrollment Code for the Blueprint you wish to enroll their device in.

For more details on all available methods for enrollment, click here.


With Liftoff, you can make a freshly unboxed Mac transform itself into an enterprise-ready computer with all the right apps, settings, and security controls in place. Liftoff lets you show users what’s happening on that first startup and how soon they can get to work while automating as much as possible for the admin.

For more details about Liftoff, click here.