Already a NinjaOne customer? Log in to view more guides and the latest updates.

Migrate Mobile Device Management Without a Device Wipe

Topic

This article explains how to migrate your mobile device management (MDM) services to NinjaOne without performing a device wipe. 

Environment

  • NinjaOne MDM
  • iOS 26
  • iPadOS 26
  • macOS 26

Description

Apple has introduced the ability to migrate company-owned devices from one MDM to another without requiring a full device wipe, available for devices running iOS 26, iPadOS 26, or macOS 26.

Your devices must already be part of Apple Business Manager (ABM) or Apple School Manager (ASM) and have been enrolled via Automated Device Enrollment (ADE) into the original MDM. If both these requirements are met, you can use the following steps to migrate these devices into NinjaOne MDM without requiring a full wipe of the device.

As a best practice, NinjaOne recommends first enrolling a non-migrated device into NinjaOne to ensure that the defined configuration places the device in the expected end state. Once you verify that the configurations are working as expected, you are ready to begin migrating devices.

Select a category to learn more: 

Prepare the NinjaOne Environment

You must configure NinjaOne to support device enrollment through ADE. To do so, perform the following steps: 

  1. Upload an Apple Push Notification (APNs) certificate. For instructions, refer to MDM: Apple Push Notification Service (APNs) Enrollment.
  2. Define the ADE profile. For instructions, refer to NinjaOne Apple MDM: Integrate with ABM for Automated Device Enrollment (Supervised Devices).

At this stage, you should not yet assign devices in ABM to the configured ADE Profile.  

  1. In ABM or ASM (whichever service you are using for your devices), open the device page and click the ellipsis button. Select Assign Device Management
abm_assign device management.png
Figure 1: Assign device management in the ABM
  1. Select the Device Management Service you defined when configuring the ADE Profile in NinjaOne. Then, select the Add Deadline option. 
abm_assign device management_add deadline.png
Figure 2: Assign a deadline for the device management assignment
  1. Define an enrollment deadline for the migration. 
abm_assign device management_add deadline_edit.png
Figure 3: Define the enrollment deadline

Leading up to this time, the user will be notified that the migration has been requested and will be enforced at the specified deadline. However, the user will have the opportunity to opt into the migration earlier. 

  1. Click Continue.
  2. Confirm the changes when prompted, and ABM or ASM will take a few moments to assign the device to the new MDM service and initiate the migration. 

You will see a confirmation on the screen when the process is complete. When a migration is actively scheduled for a device, the device record in ABM will also reflect this. 

Perform the Migration for iOS or iPadOS

When the migration is initiated, the user will receive a notification on the device.  Selecting Start Enrollment will open the VPN & Device Management page of the Settings app, where the device user can initiate the enrollment. 

If the user selects Not Now when they receive the deadline notification, they can continue using their device but will periodically receive a follow-up notification. Once the enforcement deadline occurs, the user will be forced to proceed with the migration.  When the migration begins, the device will restart.

mdm migrate_start enrollment.png
Figure 4: Start or delay enrollment

After restarting, the user will receive a prompt to enroll in the new MDM. This is their final opportunity to select Not Now if the enrollment deadline has not yet been reached. The device will enroll in the new MDM and indicate when it is successful.  

If the enrollment fails for any reason, the device would no longer be managed by the original MDM. In the event of an enrollment failure, you should treat is as a currently unmanaged device.

Once the enrollment is complete, the device will return to the Home screen and all settings configured by the new MDM (such as applications, restrictions, and other configurations) will install and apply to the device.

Perform the Migration for macOS

When the migration is initiated on a macOS device, the user will receive a notification on the device. Selecting the enrollment notification will take them to the System Settings app, where they can initiate the migration by clicking Start Enrollment

Once the enrollment deadline passes, the device will force the migration process.

mdm mirgrate_macos enrollment.png
Figure 5: Start enrollment on a macOS device

When initiated, the user will experience a workflow similar to a new ADE enrollment. This is the last point they can select Not Now prior to reaching the enrollment deadline, which will delay the migration while still allowing the user to access the device.  

When the enrollment process starts, the user must enter a local administrator password on the device. The device will enroll in the new MDM and indicate when it is successful.  

If the enrollment fails for any reason, the device would no longer be managed by the original MDM. In the event of an enrollment failure, you should treat is as a currently unmanaged device.
mdm mirgrate_macos enrollment_start.png
Figure 6: Start or delay enrollment on a macOS device

Additional Resources

Refer to the following resource to learn more about NinjaOne MDM: NinjaOne MDM: Resource Catalog.

FAQ

Next Steps