Home
macOS
Unexpected MacBook enrolled in Hexnode when only managing iPhones and iPads

Unexpected MacBook enrolled in Hexnode when only managing iPhones and iPadsSolved

Participant

1 week ago

A MacBook Air suddenly showed up in our Hexnode inventory, but we only use Hexnode to manage iPhones and iPads. Nobody on the team recognizes the device.

I checked our enrollment settings and the authentication mode was set to No authentication. Does that mean someone could install the Hexnode agent on a Mac, enter our enrollment domain or URL, and get the device added?

I’m trying to understand:

– How this could have happened

– Whether it creates any security risk for our MDM portal

– How to stop Macs or other non-iOS devices from enrolling

Whether we can get an email notification whenever a new device is added

Replies (1)

Marked SolutionPending Review

mary_romero

Hexnode Expert

6 days ago

Marked SolutionPending Review

This can happen if device enrollment is configured with No authentication.

When No authentication is enabled, anyone who has access to the enrollment URL or enrollment domain can initiate enrollment. For macOS, this could mean installing the Hexnode agent or enrollment profile and completing enrollment without being prompted for organizational credentials.

To prevent this in the future, update the enrollment settings:

1. Go to Admin > Enrollment > Authentication Modes.

2. Change the authentication mode from No authentication to Enforce authentication.

3. Select the directory or identity provider used by your organization.

4. Save the changes.

If you choose Active Directory authentication, users enrolling devices will need to sign in with valid domain credentials during enrollment. The directory must be linked with Hexnode before it can be used for authentication.

Since you only manage iPhones and iPads, you can also restrict enrollment by allowed device models. Configure the allowed models so that only iPhone and iPad devices can enroll. This prevents macOS and other unsupported device types from being added to the portal through standard enrollment.

Regards,
Mary Romero

Save

Unexpected MacBook enrolled in Hexnode when only managing iPhones and iPadsSolved

Replies (1)

Leaderboard

Popular Tags

Unexpected MacBook enrolled in Hexnode when only managing iPhones and iPadsSolved

Replies (1)

Related Topics

Leaderboard

Popular Tags

Login to Hexnode Community