
Intune and macOS 27: what changed and what to fix
What macOS 27 changes for Macs in Intune: the macOS 15 floor, update policies that stop working, deprecated payloads, Platform SSO and what to fix first.
What do you need?
Blog

What macOS 27 changes for Macs in Intune: the macOS 15 floor, update policies that stop working, deprecated payloads, Platform SSO and what to fix first.

MDM means mobile device management: how a business sets up and protects its Macs, iPhones and iPads. What it means on your iPhone, and what it can't see.

macOS 27 Golden Gate has been out since 14 September. What broke for business Macs, which vendors are ready, and whether your fleet should upgrade yet.

In Apple IT, DDM means Declarative Device Management: how Macs, iPhones and iPads now keep themselves configured. What it is, how it differs from MDM, and why it matters now.

CVE-2026-65400 lets attackers into Macs through Screen Sharing without a password. Which versions fix it, how to check your fleet, and what to switch off.

A 20-step offboarding checklist for UK startups on Macs, Google Workspace or Microsoft 365, Okta and Slack: what to do before, on and after someone's last day.

iOS 27 lands 14 September: no iPhones dropped, backup restores that no longer carry MDM across, and Siri AI in the UK but not the EU. What to do first.

macOS 27 drops every Intel Mac, retires the old update controls, and lands mid-September. Here is the checklist to run before your fleet upgrades.

Tailscale or Cloudflare Zero Trust? How each handles device gating, on-site storage access and Mac fleets, and which fits your business.

Why fast-growing startups standardise on Macs, and how Jamf Pro, Jamf Protect, Okta and an HRIS integration turn onboarding into a system that runs itself.

Why AI governance matters for UK businesses in 2026, from shadow AI to the EU AI Act, and how to enforce it on your Mac fleet instead of just writing a policy.

How to choose and set up a Synology RackStation for a Mac business in 2026: rack vs desktop, hardening, SMB for macOS, Time Machine, and 10GbE.

Okta, Microsoft Entra ID, Google Workspace and JumpCloud compared for Mac-first businesses: Platform SSO, Apple Business Manager federation and 2026 pricing.

macOS 27 moves Platform SSO into Declarative Device Management with a web login window, so staff sign in to the Mac with their identity provider directly.

WWDC 2026 brought two shifts for managed Macs: native binary allow and deny lists via Endpoint Security, and a declarative privacy framework replacing PPPC.

Munki is alive in 2026: version 7 is a full Swift rewrite for macOS 26, but it was never an MDM. Where Munki still wins, and where Jamf and Intune take over.

Passkeys map cleanly to FIDO2 and the maths is bulletproof, yet rollouts break on recovery, mixed fleets and enrolment. How to do it right on a Mac estate.

ClickFix tricks Mac users into pasting malware into Terminal themselves. How it walks past notarisation and passkeys, and what UK businesses should do.

Jamf Protect, CrowdStrike Falcon, SentinelOne Singularity and Sophos Intercept X for Mac compared: 2026 pricing, macOS depth and ransomware rollback.

NCSC's macOS guidance and the CIS Apple macOS Benchmark cover most of what UK businesses need on Mac. What they say, where they overlap, and macOS Tahoe.

Apple Business launched 14 April 2026 with free built-in MDM. Here's when it's enough for UK SMEs, and when you need Jamf, Intune or Iru instead.

Iru vs Jamf vs Intune for UK businesses: head-to-head verdicts, October 2026 pricing and Apple feature depth. Iru was called Kandji until 2025.

Passkeys are replacing passwords across the Apple ecosystem. Here's what UK businesses need to know about deploying them on Mac, iPhone, and iPad in 2026.

Tailscale vs Twingate, and how both compare with a traditional VPN: setup, security model, Mac deployment through MDM, and which one suits your team.

Fortinet admins report compromises on patched FortiGate devices. The CVE-2025-59718 bypass is being actively exploited. What UK businesses must do now.

Apple patched two WebKit zero-days exploited in targeted attacks. How MDM speeds up remediation on company devices, and what BYOD self-enrolment offers.

Single sign-on providers compared for UK businesses: Okta, Entra ID, Google, JumpCloud, OneLogin and open source, with October 2026 prices and free tiers.

Password managers are safe when used properly. We compare 1Password, Bitwarden, Keeper and Dashlane, with honest guidance on implementation and security.

Apple Passwords vs 1Password for UK businesses: free doesn't mean suitable. Why many need dedicated password managers for compliance and team security.

We audited 265 London creative businesses: 98% lack email encryption, 56% have no authentication. Here's what SPF, DKIM, DMARC and MTA-STS protect.

How to set up zero-touch Mac deployment in 2026 using Apple Business, Blueprints and MDM: automated enrolment, identity, FileVault and UK GDPR compliance.

Should UK businesses deploy Cloudflare WARP (now the Cloudflare One Client)? Real advantages, hidden trade-offs, and who benefits most.

Worried about work MDM on your personal iPhone? Apple's User Enrollment uses cryptographic separation to keep your photos, messages and browsing private.

M&S lost £300m to ransomware that started with a phone call. UK businesses face 4 major attacks weekly. Why your security budget might not save you.

Navigate the complexities of Apple Intelligence in UK enterprises: data sovereignty concerns, MDM controls, and the government's encryption battle with Apple.