We are a new company and we provision Macbooks for our new employees. We have proper MDM on our roadmap to be rolled out within 6 months, but in the meantime we need to make sure the company's computers are secure, mainly for when employees may terminate employment.

A colleague of mine had an employee who had his Apple ID associated with his work MacBook. He was fired, and upon his departure (so they think) he got on his iPhone, went to Find My iPhone, and remotely wiped the MacBook.

How can we avoid situations like this? I believe we need to set up all MacBooks with 2 accounts - one master Admin-level account, and an account for the employee which does NOT have admin privileges. Would this cover us? How do we ensure that they can't associate their Apple ID to the Mac, such that they can wipe it remotely like that?

closed as off-topic by nohillside Aug 13 at 6:38

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must demonstrate a reasonable amount of research & understanding of the problem being solved. Please edit to either a) clearly describe your problem and the research done so far to solve it or b) include attempted solutions plus why they didn't work. In either case, be sure your expected results are clearly presented." – nohillside
If this question can be reworded to fit the rules in the help center, please edit the question.

Browse other questions tagged .