Curated references for endpoint management.
Tools, documentation, and community work we reach for every week. Kept minimal and maintained — if something drops off the list, it's usually because we stopped using it.
Official documentation
6 itemsApple MDM Protocol Reference
Official spec for MDM commands, payloads, and Declarative Device Management.
Microsoft Intune Documentation
Complete reference for Intune configurations, policies, and deployment.
Microsoft Graph API
Query and manage Intune devices, users, and compliance programmatically.
Apple Platform Security Guide
Deep reference on macOS, iOS, and ecosystem security architecture.
Android Management API
Google's official guide to managing Android devices at scale.
Samsung Knox Platform for Enterprise
Technical documentation for KPE, KSP, and Samsung-specific device policies.
Apple ecosystem
5 itemsApple Business Manager
Manage devices, users, and VPP assignments at organizational scale.
iOS App Bundle ID Lookup
Find bundle IDs for iOS and macOS apps by searching the App Store.
Declarative Device Management
Modern declarative MDM protocol — configurations, assets, and activations.
macOS Security Compliance Project
NIST-backed security baselines and rules for macOS hardening.
Platform SSO
Apple's native single sign-on framework for macOS enrollment.
Android ecosystem
5 itemsAndroid Enterprise network requirements
Endpoints and firewall rules required for Android Enterprise enrollment.
Android Enterprise Recommended devices
Google's list of AE-certified devices with guaranteed update support.
Google Play Custom App Publishing
Publish private apps to managed Google Play for your organization.
Android Enterprise QR generator
Generate enrollment QR codes for dedicated, COPE, and COBO device modes.
Knox Service Plugin
Advanced Samsung device restrictions via KSP JSON configuration.
Tools we reach for
6 itemsSwiftDialog
Native macOS dialog utility for admin scripts and enrollment flows.
Nudge
Force macOS updates by a deadline without blocking user work.
Installomator
One-shot installer script for 700+ Mac applications. The MDM duct tape.
Santa
Binary authorization daemon for macOS. Originally from Google's security team.
AutoPkg
Automate Mac application packaging and deployment recipes.
Mist-CLI
Download macOS installers and firmware directly from the command line.
Community & blogs
4 itemsMac Admins Slack
The community hub for enterprise Apple admins. Around 40k members, active daily.
SS Mac Admin
Deep-dive guides on Intune, Azure Automation, and macOS management.
Der Flounder
Rich Trouton's long-running Mac admin blog. Battle-tested scripts and notes.
r/macsysadmin
Active subreddit for Mac admins. Help threads, deployment strategies, vendor chatter.