Any previously enrolled devices will automatically be unenrolled on June 30, 2022. Your employees will not be impacted—unenrolling devices will occur in the background and will not interfere with their work.
If you're looking for another device management option, try JumpCloud.
Easily manage and protect your company’s devices in Gusto. Help secure your company’s data with full fleet visibility, enforced security standards, and remote wipe and lock capabilities—all at no additional cost during the Early Access program.
If you need help at any time, get the quickest answers by emailing [email protected] directly.
This one-time setup for admins will only take a few minutes and is required by Apple for added security. It gives Gusto the permission to manage your company’s devices and you can revoke access at any time.
You’ve successfully enrolled in the Device Management program. Once you enroll the first device (this could be your device), you can start managing it through Gusto.
Enrolling devices in your company’s device management program helps you enforce security and compliance policies, remotely lock or wipe the device if it’s lost, stolen or during employee departures, and automatically capture and view basic device details.
You’re only able to enroll devices that are owned by the company. We encourage you to remind your employees not to enroll their personal devices for now. In the future, we plan to support employee-owned devices, so stay tuned.
Devices can be enrolled in two ways:
If you need use both methods, select one method to start. Then come back and enroll the remaining devices using the other method.
You’ll be taken back to the Devices dashboard, where you can see invitations sent in the Pending Enrollment tab.
Successfully enrolled devices will appear in your enrolled devices list. Any devices you’ve started an enrollment for but did not finish will appear in your pending enrollments list.
Head to the Devices section of your Gusto account to review the devices you manage. Use the “Active” and “Pending Enrollment” tabs to review all information.
For active devices, under the “Device” column, click the link to manage that device.
Here’s what you can see and do with each device:
Click the dropdowns below to learn more about each action you can take while managing the devices.
If someone forgot their device password, you’ll need to help them reset it in one of three ways:
Personal Apple ID recovery
If the person set up their personal Apple ID on the device, they should follow Apple’s instructions to reset their password.
If a device cannot be unlocked and password reset, use the options below to help.
Using an encryption key
You’ll need to check if this option is available for the specific device before you can use this solution—it’s typically available if a computer did not have “FileVault” enabled previously. To check:
Wipe and re-enroll the device
If all else fails, follow the instructions in this article to wipe the device, and then re-enroll it. This will allow the user to set a new password.
Reassigning a device to a new user will re-assign the device in Gusto only. If you’re transferring a device with existing data on it, we recommend wiping the device first and then re-enrolling the device (rather than simply reassigning).
If you find that a device has been lost or stolen, you may want to lock the device—review the information below before locking.
Lock a device
If you need to wipe a device for any reason (lost, stolen, employee departed, etc) follow the steps below.
Wiping a device will permanently remove all existing data and settings on the device and the device will be unassigned and unenrolled. This action cannot be undone, and you’ll have to enroll the device again if you choose to wipe it—the alternative option is to reassign the device as-is.
Here's how to wipe a device:
To locate the security profiles on a device:
View the security profiles applied to the device.
Types of security profiles
What does it do?
Managed Software Center
Configures the Managed Software Center, which provides and updates common apps like Slack and Zoom.
Requires complex passwords for macOS user accounts.
macOS Application Gatekeeper
Requires macOS to warn and confirm prior to running unverified software for the first time. Ensures XProtect, the built-in antivirus included with macOS and iOS, is enabled.
macOS Application Use
Blocks Remote Screen Observation requests. Restricts a personal Apple ID’s ability to sync documents and other local media to iCloud. Helps protect against data exfiltration.
Enables the macOS Firewall’s Stealth Mode, making the device more difficult to discover and access on public networks. Helps protect against malicious network communication.
macOS Login Window
Displays “Enrolled in Gusto Device Management” verification message during the macOS login.
Ensures device locks promptly when idle. Helps protect against unauthorized access or accidental hardware damage.
Enables automatic macOS, App Store, and XProtect updates, ensuring Apple’s latest security patches are promptly applied. XProtect is the built-in antivirus included with macOS and iOS.
Ensures critical notifications about software updates and Gusto Device Management are always visible.