Mac Admins, Your Migration Glow-Up Just Dropped!

The New ABM Superpower from WWDC25

If you’ve ever had to migrate macOS devices from one MDM to another, you know the pain: factory resets, manual re-enrollments, lost configurations, and very confused users. But at WWDC25, Apple finally gave Mac admins a gift: a smooth, no-wipe, user-friendly way to switch MDMs—built right into Apple Business Manager.
Whether you’re streamlining tools or consolidating your device fleet, this new migration feature lets you reassign macOS supervision without breaking a sweat—or your policies.
In this post, I’ll walk you through the step-by-step process of switching macOS management from one MDM to another using the new ABM update—with real screenshots from ABM, Intune, and macOS. Let’s make that migration glow-up happen 💻

---

“We’re considering moving our macOS fleet… from Jamf Pro to Intune… given the small proportion of Macs, it’s hard to justify Jamf licensing”

Picture this: you manage a mixed environment, and macOS devices are a minority. Yet, maintaining a separate Jamf license and workflows is a headache.

But that’s all about to change. With the latest updates announced at WWDC 2025, Apple has introduced a new, streamlined path for MDM migration directly within Apple Business Manager (ABM). This new feature promises a future where migrating your macOS devices is no longer a high-stakes project but a straightforward, manageable task.

The benefits are clear: a seamless transition, the preservation of user data and applications, and minimal disruption to your organization’s workflow.

In this guide, I’ll walk you through the entire process, from initial planning to post-migration cleanup. I’ll use a practical example of migrating from Jamf MDM to Microsoft Intune, but the principles apply to any MDM-to-MDM transition.

Part 1: The Groundwork – Planning Your Migration

A successful migration is built on a foundation of meticulous planning. Before you touch a single setting, it’s crucial to have a clear strategy.

Define Your Goals

Start by asking “why?” What are the key drivers for this migration? Are you looking to:

• Consolidate endpoint management tools?
• Enhance your security posture with features from a new MDM?
• Reduce licensing costs?
• Improve the end-user experience?

Your answers will shape your project’s requirements and help you measure its success.

Inventory and Audit

Next, get a clear picture of your current environment:

• Device Inventory: Create a detailed list of your Mac devices. Note their models, macOS versions, and ownership type (corporate-owned vs. user-owned). The new migration feature has specific OS requirements, so this is a critical step.
• MDM Audit: Document all your configurations in your current MDM. This includes:
  • Configuration Profiles (Wi-Fi, VPN, email, certificates)
  • Compliance Policies
  • Security Baselines (FileVault, Gatekeeper, Firewall)
  • Scripts
  • Deployed Applications

Communication is Key

Don’t leave your users in the dark. A well-thought-out communication plan is essential. Let your users know:

• What is happening (a change in device management).
• Why it’s happening (the benefits to them and the organization).
• When it will happen (your migration timeline).
• What to expect (a notification on their Mac, a few simple steps to follow).

---

Part 2: Pre-Migration Setup – Preparing the New Environment

Now it’s time to get your new MDM solution ready. In our example, we’re setting up Microsoft Intune.

Setting up Microsoft Intune

1. Add Intune to Apple Business Manager: In ABM, you’ll need to add a new MDM server. This involves downloading a public key from Intune and uploading it to ABM, then downloading a server token from ABM and uploading it to Intune.
2. Configure the Apple MDM Push Certificate: In Intune, create and upload an Apple MDM Push Certificate (APNs). This is what allows Intune to communicate with your Apple devices.
3. Replicate Your Configurations: Using the audit you performed in the planning phase, recreate your policies, profiles, scripts, and applications in Intune. This is the most time-consuming part of the process, but it’s crucial for a seamless user experience post-migration.

Preparing Apple Business Manager (ABM)

• Verify Your Devices: Ensure all the Mac devices you intend to migrate are present in your ABM instance.
• Check Your Roles: You’ll need an account with the “Administrator” or “Device Enrollment Manager” role in ABM to perform the migration.

---

Part 3: The Migration – Step-by-Step Execution

This is where we put Apple’s new migration feature to work.

The New “Migrate Devices” Feature in ABM

Apple’s new workflow allows you to reassign a device to a new MDM server without unenrolling & wiping it first. When the device next checks in, it will be prompted to begin the migration.

Step 1: Initiate the Migration in ABM

• Log in to your Apple Business Manager account.

• Navigate to the Devices section.
• Select the device or group of devices you want to migrate.
• Choose the option to Assign Device Management.
• From the list of MDM servers, select your new server (in our case, Microsoft Intune).

• Set a deadline. This is a powerful new feature. You can give users a grace period to complete the migration at their convenience.

iOS, iPadOS, or macOS 26 and enrollment into a device management service are required to set an enrollment deadline. 

• Confirm the assignment.

Step 2: The User Experience on the Mac

• The user will receive a notification on their Mac, informing them that a management change is required.

• When the user clicks the notification, they will be guided through a simple approval process.

• This user-centric approach empowers users to start the migration when it’s convenient for them, minimizing disruption.

Step 3: The Automated Process

Once the user approves the migration, the magic happens in the background:

• The Mac communicates with Apple’s servers to get its new assignment.

• The new MDM profile from Intune is downloaded and installed.

• Critically, the old MDM profile is removed after the new one is in place.
• Because the device is not unenrolled, managed apps and data are preserved.

Deadline Mode: Enforcing the Migration

If a user doesn’t initiate the migration before the deadline you set in ABM, the system will enforce it. The user will see a non-dismissible, full-screen prompt on their Mac requiring them to complete the migration to continue using the device.

Demo of MDM Migration – End User Experience

---

Part 4: Post-Migration – Verification and Cleanup

The work isn’t over quite yet. It’s time to verify that everything has gone smoothly.

Verify Enrollment in Intune

• In the Microsoft Intune admin center, check that the migrated devices are now appearing as managed.
• Verify that they are compliant with your policies and that applications have been successfully deployed.

User Verification

• Have a small group of pilot users run through a checklist to ensure they have access to all necessary resources:
  • Wi-Fi and VPN connectivity
  • Email and calendar access
  • Key business applications

Decommissioning the Old MDM

Once you have successfully migrated all your devices, you can begin the process of decommissioning your old MDM solution. This will include removing the old MDM server from Apple Business Manager.

---

Conclusion

WWDC25 didn’t just unveil a feature—it delivered peace of mind. The days of fearing MDM migrations are over. Thanks to the groundbreaking device migration features introduced in Apple Business Manager, the entire process has been transformed from a high-stakes project into a straightforward administrative task.

As we’ve walked through, the benefits of this new approach are transformative:

• Zero Data Loss: The most significant advantage is the preservation of user data and applications. Migrating no longer means starting from scratch.
• Minimal Disruption: By empowering users to initiate the migration at a convenient time, you maintain productivity and reduce help desk tickets.
• Enhanced IT Efficiency: The streamlined, reliable workflow allows IT teams to execute migrations with confidence and without the need for complex workarounds or manual interventions on each device.

By following a structured approach of meticulous planning, thorough preparation of your new MDM environment, and clear communication with your end-users, you can transition your entire macOS fleet with confidence.

What’s your next move? Don’t wait for your current MDM solution to become a roadblock. Start the conversation with your team today. Use this guide to map out your own migration plan. The future of Mac administration is here, and it’s more agile and user-friendly than ever.