This is the exact problem Apple Business Manager solves. Yet in our experience with hundreds of local SMEs, fewer than one in five have it configured properly. That gap is what this post is about.
What Apple Business Manager Actually Does
Apple Business Manager (ABM) is Apple's free portal for organisations to buy, deploy and manage Apple devices at scale. It is not an MDM (Mobile Device Management) tool on its own — it is the layer that sits between Apple and your MDM (typically Jamf or Microsoft Intune), telling them which devices belong to your business.
The practical benefits are concrete:
We have processed somewhere north of 12,000 device interactions in our workshop over the years, and the pattern is consistent: businesses that adopt ABM early avoid the most painful recovery scenarios entirely.
Why Most Johannesburg SMEs Skip It
The honest answer is that the setup is opaque. Apple's documentation assumes you already understand the moving parts. You need:
Each step has a place where it can fail silently. We have seen businesses get stuck for three weeks on the DUNS verification because the registered company address on CIPC did not match what was on the application. The official Apple Support documentation is correct but assumes context most owners do not have.
The Maths: Why It Pays Off at Device Six
Here is the calculation we walk clients through in Hyde Park Johannesburg.
Manually onboarding a single Mac properly — meaning fresh install, business Apple ID configuration, app installation, security profile, FileVault setup, backup configuration — takes a competent technician about 90 minutes. At standard rates, that is roughly R1,200 per device, every time, including reinstalls.
With ABM and a configured MDM, that same device onboards itself in under 15 minutes with zero technician time. The break-even sits at roughly device six. Beyond that, every new MacBook, every replacement after a logic board repair, every device returning from liquid damage recovery — they all re-enrol automatically.
Our setup fee is R6,999 one-time, which covers the full ABM configuration, MDM selection and deployment (Jamf Now or Microsoft Intune, depending on whether you are Microsoft 365 or Google Workspace based), reseller linking, and onboarding the first batch of devices. Ongoing MDM licensing sits at R80 to R150 per device per month, depending on the platform and feature tier.
For a 15-person company, that is roughly R1,500 to R2,250 monthly for complete device control, automated enrolment, remote wipe, app deployment and compliance reporting.
What the 2-3 Day Implementation Looks Like
We do not believe in dragging this out. A clean ABM rollout for an SME follows this rhythm:
Day 1 — Discovery and DUNS. We audit your current device list, serial numbers and existing Apple IDs. If you do not have a DUNS number, we submit the application that morning. We assess your existing fleet from R599 per device for the audit portion. This is also where we identify which devices have personal Apple IDs that need to be released before enrolment.
Day 2 — Portal setup. Once Apple verifies the DUNS (this can happen same-day or take 48 hours), we create the ABM portal, configure your Managed Apple ID hierarchy, link your reseller, and stand up the MDM server. Configuration profiles for Wi-Fi, VPN, FileVault, Gatekeeper and app whitelisting all get built here.
Day 3 — Enrolment and handover. Existing devices get enrolled either over-the-air (for supervised iPhones and iPads) or via a brief workshop visit for Macs that need to be wiped and re-enrolled. Staff training takes about 30 minutes. We hand over admin credentials and documentation.
If load shedding interrupts a day — and it has, more than once — we shift to mobile hotspot and keep moving. We have built around Stage 4 enough times that it no longer derails us.
Choosing Between Jamf and Intune
The MDM choice depends on your existing stack.
If you are a Microsoft 365 shop with Azure AD/Entra ID already deployed, Microsoft Intune is usually the right answer. It is bundled with most Business Premium licences, meaning your incremental cost is near zero, and the integration with Conditional Access policies is excellent.
If you are Google Workspace or platform-agnostic, Jamf Now is the lighter, cleaner option. The interface is built for Apple, the configuration logic is Apple-native, and the learning curve for an internal IT contact is shallow. Jamf Pro is overkill for fewer than 50 devices, in our view.
We have deployed both repeatedly. Intune saves money for Microsoft houses. Jamf is faster to administer day-to-day. Either works.
What Happens to Devices Already in the Wild
This is the question we get most often. The honest answer: existing Macs and iPhones can be brought into ABM, but they generally need to be wiped and re-enrolled to come under Automated Device Enrolment properly. For devices purchased through iStore or Core Group in the last few years, we can request retroactive enrolment using the proof of purchase and serial numbers. Apple has loosened the rules here, though it still requires a formal request.
For devices bought second-hand or from overseas, manual enrolment via Apple Configurator 2 is the path. It is slower but functional.
This is also a good moment to check warranty status. Devices purchased through authorised SA resellers carry the standard Apple warranty, and our own out-of-warranty repairs come with up to 3-year warranty on the work itself — useful context if you are planning a fleet refresh as part of the rollout.
Getting Started
If you are running five or more Apple devices and still onboarding each one by hand, the maths is no longer in your favour. The setup is genuinely a 2-3 day exercise, not a multi-week project, provided someone who has done it before is running point.
You can WhatsApp us on 064 529 5863 for a no-obligation scope conversation, or book online at zasupport.com/book for an on-site assessment at your Johannesburg office. If you would prefer email, contact us through the website and we will come back to you the same working day.
Frequently Asked Questions
Q: Do I need a DUNS number even if my company is small?
Yes. Apple requires a DUNS number for every organisation enrolling in Apple Business Manager, regardless of size. The good news is that the DUNS application is free, and we handle the submission as part of our setup process. Most South African registered companies receive their number within 3 to 7 business days.
Q: Can I use my personal Apple ID as the admin for ABM?
No, and you should not want to. ABM requires a Managed Apple ID created specifically for the organisation, ideally tied to a shared mailbox like admin@yourcompany.co.za rather than a personal address. This protects the business if the original admin leaves.
Q: What happens to devices when an employee resigns?
With ABM and MDM in place, you log into the dashboard and trigger a remote wipe. The device returns to factory state but remains enrolled to your organisation, so it auto-configures for the next employee on first boot. No Activation Lock drama, no Apple ID recovery requests, no waiting.
Q: Does ABM work with iPhones bought on a Vodacom or MTN contract?
Yes, but only if the device was purchased through a reseller registered with Apple's Automated Device Enrolment programme. Most South African network carriers are not. Devices bought through carrier contracts usually need manual enrolment via Apple Configurator, which we can handle but takes longer per device.
Q: How much does the ongoing MDM licence actually cost?
Between R80 and R150 per device per month, depending on the platform. Microsoft Intune is often already included in Microsoft 365 Business Premium, which makes it effectively free for clients already on that plan. Jamf Now sits at the lower end of the range. Jamf Pro and Kandji are higher but offer more advanced features that most SMEs do not need.
Q: Can ZA Support manage the MDM for us after setup, or do we need internal IT?
We offer both. Many of our SME clients have us on a monthly co-management arrangement where we handle policy updates, new device enrolment, troubleshooting and audit reporting. Others prefer to take it in-house after we train their internal IT contact. The choice depends on how often your fleet changes and whether you have someone comfortable in the MDM console.
