How to Manage a Company iPhone Fleet with Jamf

Managing a handful of iPhones manually is manageable. Managing fifty, or two hundred, across multiple locations in the Gulf or Ireland is a different problem entirely — and doing it without a proper MDM platform means you're always one lost device or one rogue app away from a serious security incident.

Jamf gives you a structured, repeatable way to manage every company iPhone from a single dashboard. Here's how it works in practice.

Enrollment: Getting iPhones Under Management

The first step is getting your devices enrolled in Jamf. There are two main paths:

Automated Device Enrollment (ADE) — for corporate-owned iPhones purchased through Apple Business Manager or an authorised reseller. The device is supervised automatically at setup, with no user action required beyond turning it on and following the setup screens. This is the right approach for new devices.

User Enrollment — for BYOD scenarios where employees use personal iPhones for work. This gives your organisation control over work data only, without touching personal content. More on this in the BYOD article.

For a corporate fleet, ADE is the standard. Every new iPhone joins management automatically, without IT touching the device.

Configuration Profiles: Setting the Rules

Once enrolled, Jamf lets you push configuration profiles to devices. These define how the phone behaves:

• Force screen lock with a passcode
• Require a minimum passcode complexity
• Disable AirDrop to unmanaged devices
• Configure Wi-Fi and VPN automatically
• Set up corporate email and calendar without users entering credentials
• Restrict installation of unapproved apps

Profiles can be scoped to all devices, to specific groups, or to individual users — so your sales team and your finance team can have different restrictions without manual intervention.

App Management

Jamf integrates with Apple Business Manager to give you full control over app distribution:

• Push required apps silently — no App Store interaction needed from the user
• Block specific apps from being installed
• Purchase volume app licences through ABM and assign them to users or devices
• Remove apps remotely when an employee leaves

You never need to share an Apple ID or ask employees to buy apps themselves.

Lost or Stolen Devices

This is where MDM earns its keep. If a company iPhone is lost or stolen, you can from Jamf's dashboard:

• Lock the device remotely with a custom message and contact number
• Wipe the device completely if recovery isn't possible
• Track last known location (for supervised devices)

Without MDM, a lost iPhone with corporate email and files is a serious data breach risk. With Jamf, it's a recoverable incident.

Keeping Devices Updated

iOS updates often carry critical security patches. Jamf lets you enforce minimum iOS versions and push update reminders to users — or, on supervised devices, schedule updates to install automatically during off-hours.

This takes OS compliance from a manual chase to an automated baseline.

Reporting and Compliance

Jamf gives you a live inventory of every managed iPhone: model, OS version, installed apps, last check-in time, encryption status, and compliance state. This is useful for internal audits, and essential if you're working toward any formal compliance standard.

Where to Start

If you have ten or more company iPhones and no MDM in place, the setup process is simpler than most people expect. The main steps are:

1. Set up Apple Business Manager
2. Link ABM to a Jamf instance
3. Enroll existing devices (or set up ADE for new ones)
4. Define your configuration profiles and app assignments
5. Push and verify

If you'd like help scoping and setting this up for your team, get in touch — we've done this for companies across the Gulf and Ireland.