Do You Need Jamf, Intune or Apple Business Manager?

You have just bought MacBooks for the team. Now you are reading about Apple Business Manager, MDM, Jamf, Kandji, Mosyle and Microsoft Intune, and none of it explains which ones you actually need or what they cost.

This guide clears that up. It is written for a non-technical owner or office manager at a small UK business, not for an IT department. By the end you will know what each piece does and which combination fits a team of your size.

Quick answer:

• You almost always need two things: Apple Business Manager, plus one MDM.
• Apple Business Manager is a free Apple account. It lets company Macs enrol automatically and keeps apps and licences with the business.
• An MDM is the tool that applies settings, pushes apps, and lets you lock or wipe a device. Jamf, Kandji, Mosyle and Microsoft Intune are all MDMs.
• If you already pay for Microsoft 365 Business Premium, Intune is included and is usually enough for a small team.
• If you are Mac-only and not on Microsoft 365, a dedicated Apple MDM like Jamf or Kandji is the better fit.

The three things people confuse

These are not competing products. Two of them work together, and the third is a category the others belong to.

Apple Business Manager

A free web portal from Apple. It does two jobs. First, it links the Macs your business buys, from Apple or an authorised reseller, to your company so they can set themselves up automatically the first time they are switched on. Second, it buys and assigns apps to the business rather than to someone's personal Apple ID, so licences stay with you when staff leave.

Apple Business Manager on its own does not enforce anything. It does not switch on encryption or push a password policy. For that you need an MDM connected to it.

MDM (mobile device management)

MDM is the general term for the software that manages devices. An MDM connects to Apple Business Manager and does the actual work: enforcing FileVault encryption, setting a screen lock, deploying Microsoft 365 and other apps, applying update rules, and letting you remotely lock, wipe or reassign a Mac.

Jamf, Kandji, Mosyle, Microsoft Intune and Apple Business Essentials are all MDMs. You pick one.

Jamf

Jamf is the best known Apple-focused MDM. Jamf Pro is the powerful enterprise product; Jamf Now is a simpler version aimed at small businesses. Jamf is a strong choice for Mac-heavy teams, but it is one option among several, not a requirement.

How to choose your MDM

For a small UK business the realistic shortlist is Microsoft Intune or a dedicated Apple MDM. Here is how they compare.

	Microsoft Intune	Dedicated Apple MDM (Jamf, Kandji, Mosyle)
Best when	You already use Microsoft 365	You are Mac-first and not tied to Microsoft
Cost	Included with Microsoft 365 Business Premium	Roughly £2 to £8 per device per month, billed separately
Manages Windows too	Yes, one tool for a mixed fleet	Mac, iPhone and iPad only
Apple-specific features	Good, and improving each release	Deepest, fastest to support new macOS features
Setup complexity	Moderate, needs Microsoft 365 configured properly first	Generally quicker to stand up for Macs alone

Two simple rules cover most small businesses:

• Mixed fleet, or already on Microsoft 365: start with Intune. You are likely already paying for it, and one tool for Macs and PCs is simpler.
• All Mac, and not on Microsoft 365: a dedicated Apple MDM. Kandji and Mosyle are strong, modern options for small teams; Jamf is the established name.

A decision path

Both routes still need Apple Business Manager set up alongside them. That part does not change.

What about Apple Business Essentials?

Apple Business Essentials is Apple's own bundle of device management plus iCloud storage and support, aimed at businesses with up to 500 employees. It is simple and cheap, but the management controls are lighter than Jamf, Kandji or Intune. It suits a very small team that wants the basics and nothing more. Most growing businesses outgrow it.

Why the UK context matters

Two things push UK small businesses towards doing this properly rather than skipping it.

GDPR and staff turnover. If a laptop holds client data and a staff member leaves, you need to be able to remove that data quickly and prove you can. Device management gives you a remote wipe and a clean record. Without it you are relying on getting the laptop back and trusting nothing was copied. The ICO expects businesses to have that level of control over devices holding personal data.

Cyber Essentials. If you bid for public-sector or larger private contracts, Cyber Essentials is often required. It asks for device encryption, a screen lock, supported and patched software, and control over who can install what. An MDM enforces all of those across every Mac at once, which is far easier than checking each machine by hand. Our Cyber Essentials checklist covers the full set of controls.

What a professional setup includes

When Verge Tech sets this up for a small business, the job covers:

• Creating Apple Business Manager and linking it to your Apple reseller
• Choosing and configuring the MDM that fits your size and budget
• Automated enrolment so new Macs configure themselves out of the box
• A security baseline: FileVault, firewall, screen lock and an update policy
• Deploying Microsoft 365 and your other core apps
• A written joiner and leaver process so adding or removing staff takes minutes

It can be a one-off project you run yourself afterwards, or a monthly service where we handle it. Full details are on our Apple device management page, including a quick self-check tool. If you are also moving email into Microsoft 365 at the same time, see our guide to Microsoft 365 email migration.

Frequently Asked Questions

Do I need Jamf for Mac management?

No. Jamf is one MDM among several. If you already use Microsoft 365, Intune is included and manages Macs well for most small teams. Jamf, Kandji and Mosyle are worth considering when you are Mac-heavy or want deeper Apple-specific controls.

What is the difference between Apple Business Manager and an MDM?

Apple Business Manager is a free Apple account that lets company Macs enrol automatically and keeps apps and licences with the business. An MDM is separate software that actually applies settings, pushes apps and lets you lock or wipe a device. They work together and you need both.

Can Microsoft Intune manage MacBooks?

Yes. Intune manages macOS devices including automated enrolment, encryption, compliance policies and app deployment. For a small team already on Microsoft 365 Business Premium it is usually enough, and it manages Windows PCs with the same tool.

How much does Mac device management cost for a small business?

Apple Business Manager is free. A dedicated Apple MDM is roughly £2 to £8 per device per month. Intune is included with Microsoft 365 Business Premium at no extra cost. On top of that there is a one-off setup cost, which a provider will quote after a short scoping call.

Can I set up management on Macs staff are already using?

Yes. Macs already in daily use can be enrolled without wiping them or losing anyone's files. New Macs bought through an Apple Business Manager reseller can also be set to configure themselves automatically the first time they are switched on.

What happens to a company Mac when someone leaves?

With an MDM in place you can remotely lock the Mac, wipe the company data, or reassign it to a new starter, usually within minutes. Without one you are relying on physically recovering the device.