NinjaOne MDM

Certificate management via SCEP and PKI integration for iOS, Android, and macOS.

Custom XML profile deployment for advanced configurations not covered by UI.

Extensive device restrictions: disable camera, AirDrop, app store access, and more.

Email profile deployment with IMAP/POP3/Exchange support and automatic configuration.

Passcode policy enforcement with complexity rules and expiration settings.

Per-app VPN available on iOS and Android; macOS does not support per-app VPN via MDM.

VPN profile installation via MDM with support for common protocols on supported platforms.

WiFi profile deployment with WPA2/WPA3 and certificate-based authentication supported.

Android Zero-Touch enrollment supported for Enterprise devices with ZTE provider integration.

Apple Device Enrollment for iOS via ABM. Android Enterprise enrollment supported. RMM-based approach for macOS.

Bulk device enrollment via CSV upload and batch importing for scalable fleet onboarding.

Limited conditional enrollment based on device state; not as sophisticated as Intune or Jamf.

QR code-based enrollment available for iOS and Android, simplifying manual device enrollment.

Samsung Knox integration enabled for Android devices with Knox platform support.

BYOD enrollment supported on supported platforms with work profile separation on Android.

Windows Autopilot not supported as NinjaOne MDM does not cover Windows enrollment.

Block installation of specific apps or restrict access to managed devices.

Built-in app catalog for rapid app deployment; integrates with App Store, Play Store.

App configuration framework for deploying app-specific settings and parameters.

Apple Volume Purchase Program integration for iOS and macOS; no Android equivalent.

Google Play Store and managed Google Play integration for Android app distribution.

Mobile Application Management available for iOS and Android; separates work apps on devices.

Silent app installation to user devices without requiring manual approval.

Win32 LOB app deployment not available; Windows MDM not supported.

Basic compliance engine with policy evaluation; simpler than Jamf or Intune.

Data Loss Prevention not available in NinjaOne MDM.

Device encryption enforcement with FileVault 2 on macOS and native encryption on mobile.

Geofencing not natively supported in NinjaOne MDM.

Jailbreak/root detection and remediation with optional automatic unenrollment.

Full device wipe capability with optional PIN/passcode requirement for security.

Selective wipe of managed data and work profiles without affecting personal data.

Mobile threat defense and EDR not natively integrated; RMM has some EDR for Windows/macOS.

Android update management varies by OEM; basic system update control available.

Firmware updates not directly managed via MDM; device-specific.

iOS update management with ability to force OS updates or defer by specific days.

macOS update management via RMM integration; MDM component has limited native update control.

iOS and macOS support deferral windows; Android deferral limited by OEM fragmentation.

Windows update management not available; NinjaOne handles this via RMM, not MDM.

Application deployment and usage analytics.

Comprehensive audit logging of admin actions and device activities.

Compliance status reporting with policy adherence metrics.

Custom report builder for tailored compliance and inventory reports.

Unified inventory dashboard combining RMM and MDM device data.

Real-time device status and policy compliance visibility.

Custom script execution available for macOS via RMM agent.

Remote restart capability for Android and macOS devices.

Remote lock with optional custom message display on device screen.

Screen view/remote desktop not available in MDM; available via RMM for macOS.

Remote terminal available for macOS via integrated RMM agent only.

Immediate remote wipe action with audit trail.

Device type filtering for phone, tablet, shared device policies.

Smart groups with limited rule-based targeting; less sophisticated than Jamf or Intune.

Geographic or network-based targeting not available.

Tag-based device and user targeting for policy and app deployment.

User-based device assignment and policy targeting.

Entra ID integration not available; NinjaOne is primarily directory-agnostic.

Conditional access policies not available in NinjaOne MDM.

Google Workspace directory integration not available.

Third-party identity provider integration like Okta not available.

On-premises Active Directory integration not directly supported in MDM.

SAML/OIDC authentication not supported for device enrollment or user authentication.

Automation workflows for policy assignment and remediation via RMM/MDM integration.

Plugin framework not available; limited extensibility.

REST API for programmatic device and policy management; improving but still limited.

ServiceNow integration via API for ticketing and asset management.

SIEM integration not available in NinjaOne MDM.

Webhook support for device lifecycle and policy events.