Choosing an MDM for Apple Device Management in 2026: what IT teams need to know

The rules for managing Apple devices changed in 2026. In March 2026, Apple announced Apple Business, a single free platform at business.apple.com that consolidated Apple Business Manager, Apple Business Essentials, and Apple Business Connect, with availability beginning April 14, 2026. Apple Business includes a built-in Mobile Device Management (MDM) baseline at no additional cost, and former Apple Business Essentials customers no longer pay monthly device-management fees. Any IT team choosing Apple device management today has to start from this new baseline, not the one that existed a year ago.

That baseline changes the starting point for Apple-only fleets, but it does not replace every third-party MDM use case. This guide is for IT teams making the choice. It covers what Apple Business changed, what the free native MDM tier includes and excludes, the central question of whether you still need a third-party MDM, and the seven criteria that should drive the decision. MDM here means Mobile Device Management for Apple hardware (iPhone, iPad, Mac, Apple TV, Vision Pro), not Master Data Management, which is an unrelated data-governance category that shares the acronym.

Term	Meaning
Apple Business	Apple’s unified business platform introduced in 2026, at business.apple.com
Apple Business Manager / ABM	Legacy product name, now part of Apple Business; still commonly used as shorthand for the enrollment and app-licensing workflows
Automated Device Enrollment / ADE	Apple’s automated enrollment method for corporate-owned devices, introduced in 2014 as the Device Enrollment Program (DEP) and renamed in 2019
Managed Apple ID	Work-managed Apple account issued by the organization for employees
User Enrollment	Apple’s enrollment model for personally owned (BYOD) devices that keeps personal and work data separate
Declarative Device Management / DDM	Apple’s newer management model where devices apply policies and report state autonomously rather than waiting for server commands
Blueprints	Apple Business’s configuration workflow for preparing devices, apps, and settings before deployment

What changed in 2026: Apple Business and free native MDM

The Apple device management landscape consolidated in 2026. Understanding the new structure is the prerequisite for every decision that follows.

What Apple Business replaced

Apple Business is a single free platform that absorbed three previously separate products. Apple Business Manager (the enrollment and Volume Purchase Program hub), Apple Business Essentials (Apple’s paid small-business device management service), and Apple Business Connect (the brand and location-listing tool) are now one platform at business.apple.com. Apple announced the consolidation in March 2026, with availability beginning April 14, 2026. Existing account settings, devices, organization data, and location data were migrated automatically. IT admins must log into the new portal and accept the updated terms to regain access to their features.

The enrollment and Volume Purchase Program functions that lived in Apple Business Manager still exist inside Apple Business. Many IT teams still refer to these workflows as Apple Business Manager (ABM), and that term remains useful shorthand for the enrollment and app-licensing layer. The platform name is now Apple Business.

What the native MDM tier includes

Apple Business now includes a built-in MDM tier at no additional cost. The native tier provides Blueprints for automated device deployment, Managed Apple IDs, device inventory and monitoring, managed app distribution, and basic security policy enforcement, such as passcode requirements and OS update control. It integrates natively with the Apple ecosystem through the Apple Push Notification service and the Apple Business enrollment layer. For small Apple-only organizations, this baseline may be all the device management they need.

The billing change matters. Former Apple Business Essentials customers are no longer charged monthly service fees for device management. The baseline cost of managing Apple devices through Apple Business dropped to zero for the functions covered by the native tier.

What the native tier does not cover

The native tier is a baseline, not a full enterprise MDM. It is lighter on advanced compliance templates, granular reporting, sophisticated automation, deep BYOD containerization, and cross-platform management. It manages Apple devices only. Organizations with Windows, Android, or Linux devices alongside Apple cannot manage those from Apple Business. Regulated organizations that need pre-built compliance frameworks and tamper-resistant audit logging will find the native tier insufficient on its own.

Capability	Apple Business native MDM	Third-party Apple MDM	Cross-platform MDM
Apple device enrollment	Yes	Yes	Yes
Managed Apple IDs	Yes	Often integrates	Often integrates
App distribution	Baseline	Advanced	Varies by vendor
Apple-only fleet management	Good baseline	Strong	Good but rarely the deepest
Windows, Android, or Linux support	No	Usually no	Yes
Advanced compliance templates	Limited, verify against your requirements	Stronger, vendor-dependent	Stronger, vendor-dependent
Deep reporting and audit logs	Limited, verify before relying on it	Stronger	Stronger
BYOD controls (User Enrollment depth)	Baseline	Stronger	Varies
DDM roadmap alignment	Native to Apple’s direction	Must verify per vendor	Must verify per vendor
Best fit	Small Apple-only fleets with baseline needs	Apple-only fleets needing depth, scale, or compliance	Mixed fleets needing one console

The first question: Do you still need third-party MDM?

Before evaluating any vendor, answer this. Apple’s free native MDM changed the default answer for a meaningful slice of organizations. The table below walks the decision question by question.

Question	If yes	If no
Is the fleet Apple-only?	Start with Apple Business native MDM	Consider cross-platform MDM
Is the fleet small with baseline needs?	Native Apple MDM may be enough	Evaluate specialist or cross-platform tools
Do you need compliance reporting?	Third-party MDM likely needed	Native tier may be enough
Do you manage Windows, Android, or Linux too?	Cross-platform MDM	Apple specialist may fit
Do you need advanced automation or reporting?	Third-party MDM	Native baseline may fit

You may not need a third-party MDM if your fleet is Apple-only, small to mid-sized, has no strict regulatory compliance mandate, and needs core management rather than advanced automation or reporting. For this profile, Apple Business native MDM now covers the baseline at no cost, and adding a paid tool may be redundant.

You still need a third-party MDM if any of the following apply. Your fleet is mixed across Apple, Windows, Android, and Linux, and you want one console instead of several. You operate in a regulated industry that requires prebuilt compliance templates for HIPAA, CJIS, PCI DSS, and similar standards. You need advanced automation, granular reporting, deep BYOD separation, or patch management beyond Apple’s baseline. You manage at enterprise scale, where the native tier’s depth becomes a constraint. For these profiles, a specialist or cross-platform MDM remains the right investment, and it now sits atop Apple Business rather than replacing it.

The decision is no longer “free versus paid.” It is “is the free native baseline enough, or do I need depth on top of it?”

What Apple’s native MDM gives you, and where it stops

A clear view of the native tier sets the bar that any paid tool must clear to justify its cost.

What you get: device deployment through Blueprints, so devices configure themselves on first boot. Managed Apple IDs for identity. Automated Device Enrollment (ADE) is Apple’s mechanism for provisioning corporate-owned devices automatically during setup, introduced in 2014 as the Device Enrollment Program and renamed ADE in 2019. Volume Purchase Program app licensing. Device inventory and monitoring. Managed app distribution. Basic policy enforcement, including passcode rules and OS update control.

Where it stops: advanced compliance frameworks and audit-grade logging, cross-platform device support, granular fleet reporting and analytics, sophisticated conditional-access and automation workflows, deep BYOD work separation, and the dedicated support model that commercial vendors provide. These gaps are exactly where paid Apple specialists and cross-platform MDMs earn their keep.

Seven things to evaluate before choosing an Apple MDM

If the first question pointed you toward a paid tool, these seven criteria should drive the selection.

1. Native-tier gap analysis (start here)

List what Apple Business native MDM already covers for your fleet, then list what it does not. The paid tool only needs to fill the gap. Paying for capabilities that the native tier already provides is wasted budget. This gap analysis is the foundation for every other criterion.

2. Apple feature parity and day-zero OS support

Apple ships major OS updates every autumn, and management capabilities change with them. A strong Apple MDM supports new iOS, iPadOS, and macOS features on or near release day. Apple specialists typically lead here because Apple is their entire focus. Evaluate each vendor’s track record on day-zero support for the last two OS cycles.

3. Single-platform vs mixed-fleet reality

Count your devices by operating system honestly. If you run only Apple hardware, an Apple specialist usually offers the deepest management. If you run Apple alongside Windows, Android, or Linux, a cross-platform MDM that manages everything from one console reduces operational overhead that a specialist cannot address. The wrong choice here creates either shallow Apple management or fragmented multi-tool sprawl.

4. Declarative Device Management (DDM) support

Apple is moving management toward Declarative Device Management, where devices apply and report on policies autonomously rather than waiting for server commands. Apple has begun deprecating some legacy MDM software update commands in favor of DDM. Confirm that any MDM you evaluate supports DDM and has a roadmap aligned with Apple’s direction, or you risk adopting a tool that is already behind Apple’s protocol.

5. Compliance templates and audit logging

For regulated fleets, pre-built compliance templates (CIS, NIST, HIPAA, CJIS, PCI-DSS) and tamper-resistant audit logs are the features that justify a paid tool over the native tier. Availability and depth vary by vendor and plan, so confirm the exact templates, reports, retention controls, and export formats before buying. Verify that the vendor maintains these templates in line with regulations and Apple’s OS changes.

6. Enrollment model (ADE, Blueprints, BYOD)

Confirm the MDM integrates cleanly with Automated Device Enrollment through Apple Business for corporate-owned devices. For personally owned devices, evaluate the BYOD model: Apple’s User Enrollment separates work and personal data on the same device, and the depth of that separation varies by vendor. Map the enrollment model to how your devices are actually purchased and owned.

7. Total cost against the free native baseline

Calculate the three-year total cost of ownership, and measure it against zero, because zero is now the native baseline. The paid tool’s cost is justified only by the gap it fills. Per-device pricing for Apple MDM ranges from a few dollars to premium tiers. Include implementation, support, and admin overhead. A tool that costs more than the value of the gap it closes is not worth adopting now that Apple covers the baseline free.

Apple MDM options by category

Rather than rank individual products, evaluate them by category. Each category fits a different fleet profile.

Apple’s native MDM (the new baseline)

Apple Business native MDM is the default starting point in 2026. It is free, integrated, and sufficient for small Apple-only fleets with baseline needs. Every other option should be measured against what it adds on top of this. For many small organizations, the native tier is the answer, and no further spending is needed.

Apple specialists (Jamf, Kandji, Mosyle, Addigy)

Apple-specialist MDMs are built exclusively for the Apple ecosystem. Jamf is the category leader, with Jamf Now for small businesses and Jamf Pro for enterprises. Kandji is known for a modern admin console and automation through Blueprints-style workflows. Mosyle and Addigy serve Apple-focused organizations with competitive pricing and strong feature depth. These vendors typically lead on day-zero OS support and Apple-specific capabilities. They are the right choice for Apple-only fleets that need more than the native tier, particularly at scale or under compliance requirements.

Cross-platform MDM for mixed fleets (including Bento, Intune, Hexnode)

Cross-platform MDMs manage Apple devices alongside Windows, Android, and Linux from one console. Microsoft Intune is well-suited to organizations standardized on Microsoft 365. Hexnode and similar UEM platforms serve mixed mid-market fleets. Bento MDM fits the cross-platform category for teams that manage Apple devices alongside Android, Windows, macOS, or Linux and want cloud, on-premise, or hybrid deployment. The trade-off in this category is clear: cross-platform tools rarely match an Apple specialist’s depth of knowledge of Apple-specific features. Their advantage is managing every platform in one place, which matters when Apple is part of a mixed fleet rather than the whole fleet.

Which fits your fleet?

Match the option to the fleet you actually run.

• Apple-only, small, baseline needs: Apple Business native MDM is likely enough. Start there before paying for anything.
• Apple-only, larger, or compliance-bound: An Apple specialist (Jamf, Kandji, Mosyle, Addigy) on top of Apple Business. The specialist fills the depth, compliance, and reporting gaps the native tier leaves.
• Mixed fleet (Apple plus Windows, Android, or Linux): A cross-platform MDM such as Bento MDM, Microsoft Intune, or Hexnode. Managing one console across all platforms outweighs the marginal Apple-specific depth a specialist would add, unless Apple management depth is mission-critical.
• Regulated, any fleet composition: Prioritize pre-built compliance templates and audit logging over everything else. This usually rules out the native tier alone and points to a paid specialist or cross-platform tool, depending on platform mix.

Frequently asked questions

Is Apple Business Manager an MDM?

Apple Business Manager, now part of Apple Business, was historically the enrollment and app-licensing hub rather than a full MDM. As of 2026, Apple Business includes a built-in native MDM tier, along with the enrollment and Volume Purchase Program functions that were previously available in Apple Business Manager. So the platform that absorbed Apple Business Manager now includes MDM, whereas previously you connected a separate MDM to Apple Business Manager.

Is Apple Business Essentials still available?

No. Apple Business Essentials was consolidated into Apple Business in 2026, along with Apple Business Manager and Apple Business Connect. Apple announced the change in March 2026, with availability beginning April 14, 2026. Former Apple Business Essentials customers were automatically migrated and are no longer charged monthly device management fees. The device management that Apple Business Essentials provided now lives in the free native MDM tier of Apple Business.

Do I still need a third-party MDM now that Apple’s is free?

It depends on your fleet. If you run Apple-only devices with baseline needs and no strict compliance mandate, the free native tier may be enough. You still need a third-party MDM if you run a mixed fleet across multiple operating systems, operate under regulatory compliance requirements, or need advanced automation, reporting, or BYOD separation beyond Apple’s baseline.

What does Apple’s free native MDM include?

Device deployment through Blueprints, Managed Apple IDs, Automated Device Enrollment, Volume Purchase Program app licensing, device inventory and monitoring, managed app distribution, and basic policy enforcement, such as passcode rules and OS update control. It manages Apple devices only and is lighter on advanced compliance, reporting, and automation than paid tools.

What is the best MDM for Apple devices?

There is no single best. For small Apple-only fleets, Apple’s native tier is often enough. For larger or compliance-bound Apple-only fleets, an Apple specialist like Jamf, Kandji, Mosyle, or Addigy adds depth. For fleets that mix Apple with Windows, Android, or Linux, a cross-platform MDM such as Bento MDM, Microsoft Intune, or Hexnode can manage everything from a single console. The right answer depends on platform mix, scale, and compliance needs.

What is Declarative Device Management, and why does it matter?

Declarative Device Management (DDM) is Apple’s newer management model, in which devices apply policies and report their status autonomously rather than waiting for server commands. Apple is moving management toward DDM and has begun deprecating some legacy MDM commands. When choosing an Apple MDM, confirm it supports DDM and aligns with Apple’s roadmap, so the tool does not fall behind Apple’s protocol.

Can one MDM manage Apple devices alongside Windows and Android?

Yes. Cross-platform MDM and unified endpoint management (UEM) platforms manage Apple, Windows, Android, and often Linux from one console. Microsoft Intune, Hexnode, and Bento MDM are examples. The trade-off is that cross-platform tools rarely match an Apple specialist’s depth of knowledge of Apple-specific features, so the choice depends on whether single-console management or maximum Apple depth matters more for your operation.