onemorething.co_London · since 2002

The MDMs we run every day

We're vendor-neutral. We don't resell any of these, we don't take commission, and we've run estates on all of them. That means we can tell you which one fits, which one doesn't, and when the honest answer is "stay where you are and set it up properly".

Jamf
Iruformerly Kandji
Microsoft IntuneMicrosoft Intune
OmnissaWorkspace ONE
Mosyle
+ moreAddigy, SimpleMDM, Meraki, Hexnode and others

Jamf

The one most Apple-only estates end up on, and the one our team is most deeply certified in (Jamf 400). Jamf Pro for depth and control; Jamf Now for small teams who want simple. Best when Apple is your main platform and you want every knob available.

Iru

Kandji rebranded as Iru in 2025. Opinionated, fast to set up, with security and compliance built in rather than bolted on. Best for growing companies that want a strong default and don't want to build everything from scratch.

Intune

Microsoft's MDM. If you're a Microsoft 365 shop with a mixed Windows and Mac estate, it's often already paid for. Mac support has improved a lot; it still needs a macadmin to make it feel native. We're that macadmin.

Workspace ONE

Now made by Omnissa, after its spin-out from VMware. Strong in large, regulated and multi-platform enterprises. Our senior engineer is VMware Certified, and we've migrated estates both onto it and off it.

Mosyle

Popular in education and with cost-conscious businesses. Good value, solid Apple coverage, less ceremony. Best when the estate is straightforward and the budget isn't.

How we pick

Four questions decide most of it. We ask them on the intro call, before anyone mentions a product.

What else is in the estate?Apple only, or Windows and Android too? Mixed estates push towards Intune or Workspace ONE; Apple-only towards Jamf, Iru or Mosyle.
Who runs it day to day?A dedicated IT team can handle Jamf's depth. A two-person team, or none, is better served by something opinionated.
What do auditors ask for?Regulated sectors need compliance reporting out of the box. Some platforms do that well; others need building.
What have you already paid for?If Intune is in your Microsoft licence, that's a real factor. If it isn't doing the job, that's a real factor too.

Switching MDM, step by step

The fear is a week of wiped Macs and lost files. That's how it used to work. This is how we do it.

  1. Audit what you have. Every policy, profile, script and smart group in the old MDM, and whether it's still doing anything. Usually half of it isn't.
  2. Rebuild, don't copy. We configure the new MDM from the audit, cleanly, with the things you actually need. You get a better setup than the one you're leaving.
  3. Pilot with ten people. The migration agent goes out through the old MDM to a pilot group. We watch, fix, and only then go wider.
  4. Move in waves. Department by department, on a schedule you agree. Each person clicks a few times. Their files, apps and settings stay where they are.
  5. Switch off the old one. Once every device has checked in to the new MDM, we remove the old agent, close the old tenant, and hand you the documentation.

The old way

Wipe and re-enrol

Every Mac backed up, erased, set up again. Days of downtime per team, and someone always loses a file.

Our way

A few clicks

The agent deploys from your current MDM. People keep working. The change happens in the background.

Talk to us about switching

Next: Who we work with →