Interactive Mac Onboarding Checklist (Printable)

Enrolment profile: required, cannot be removed, unneeded setup screens skipped

User account created with the work identity (Jamf Connect, Platform SSO or equivalent)

FileVault on during setup or first sign-in, recovery key escrowed, user can unlock the disk

Configuration profiles: Wi-Fi, VPN, firewall, screen lock and privacy settings

Day-one apps install automatically: browser, productivity suite, chat, video calls

Security tools (EDR, DLP and others) deployed with the permissions they need

macOS update plan in place, so new devices start current