Before you can enroll your device to be managed by your company, an admin must invite you to enroll. Once they have, you’ll receive an email invite (at the work email on file in Gusto) and can take the next steps from there.
Here’s what to expect
Your company requires that you enroll the device you use for work in its device management program. This helps keep your computer up to date, secure and allows the company to take action if it gets lost or stolen.
Your company will not be able to monitor or see your activity on the computer other than a few basic details—more info in the table below.
| What your company will be able to do | What your company cannot do |
| See basic details about the device and its state (e.g. serial number, model, connection status, storage space, etc.) | See your personal data, documents, messages, or browsing history |
| Enforce security policies (e.g. firewalls and antivirus, password strength, screensaver lock time, etc.) | Track your whereabouts in real-time |
| See what apps are installed | Prevent the installation of custom apps and software |
| Lock or wipe the device for security purposes (e.g. lost, stolen, left the company, etc) | View app data |
Use the dropdowns below if you're asked to enroll your device or reset the password on it.
Enroll a device - Head to the enrollment email from Gusto—if you don’t see it check your spam folders. We’ll send the email to the work email on file in Gusto.
- Make sure you’re enrolling the work device owned by your company.
- Click Enroll this computer.
- You’ll need to enroll the device before the deadline provided. If you’ve passed the deadline to enroll, contact your company’s admin to re-send the enrollment invitation.
- Review the information your company will or will not be able to see.
- Confirm the device you’re enrolling is the correct one.
- Click Start enrolling this device.
- Click Download enrollment profile for [Name] to download your personalized device enrollment file.
- The file expires 1 hour after download—if expired, download a new file from this page.
- If you see a warning from your browser, click Keep or Allow—this file is safe and allows security settings on your device to be configured as required by your company.
- Warning message example (on Google Chrome): “This type of file can harm your computer. Do you want to keep [name].mobileconfig anyways?”
- If you see multiple warning messages, keep one and discard the others.
- Go to your Downloads folder on your device (or the folder where you saved the file).
- Locate and double-click the file titled: (Name).mobileconfig.
- You may see a notification about “Profile Installation,” ignore this or click to exit the popup.
- Look for a pop-up stating “Review the profile in System Preferences if you want to install it.” Click the notification.
- If clicking the notification did not take you to System Preferences, navigate to that section on your computer. If you’re not sure how, check out Apple’s instructions.
- You may be dropped into your System Preferences in a specific location, click the back arrow to go to the main menu of selections.
- Select Profiles.
- Once you see the “Gusto Enrollment Profile” pop up, click Install—it’ll usually take less a minute, but may take up to 5 minutes for all settings to be installed.
- If asked to confirm the installation, click Install again.
- Enter your password if prompted. The profile will install in the background, and there may not be a noticeable change when it’s done.
- When the installation is complete, the instruction page will refresh automatically letting you know it was successful and will ask you to log out and log back in to finish encryption.
Once your device is successfully enrolled, your company will see that status and be able to manage the device ongoing until it is unenrolled or wiped.
Still need help? Reach out to your employer first—if needed, they can contact Gusto directly for help.