Before you roll out device management: a 10-point checklist

Most rollout problems come from decisions made too late, not from the tools. Work through this list before you enroll the first device.

1. Count your devices. List every laptop, desktop, phone and tablet, who uses it, and whether the company or the employee owns it.
2. Decide your rules for personal devices. If staff read work email on their own phones, plan work profiles or app protection instead of full device control.
3. Set up Apple Business Manager. If you have any Apple devices, create the account early. Apple's verification can take several days.
4. Check your licences. Find out which Microsoft 365 or Google Workspace plans you pay for. You may already own a device management tool.
5. Choose how people sign in. Decide whether devices use Microsoft Entra ID or Google accounts, so passwords stay in one place.
6. Agree a security baseline. Encryption, screen lock time, passcode rules and how many days people get to install updates.
7. List the apps each team needs. Separate the apps everyone gets from the apps people can install themselves.
8. Collect network settings. Wi-Fi names, VPN details and any certificates, so devices connect without anyone typing passwords.
9. Pick a pilot group. Five to ten people from different teams, including at least one person who will tell you honestly what breaks.
10. Write the staff message. What will change, when, what people need to do and who to ask for help.

If some of these are still blank, that's normal. The free device audit fills them in with you.