onemorething.co_London · since 2002

We are macadmins.

Apple, managed properly. No generalists, no sales team.

Apple estates built like software: as code, tested, automated. Not a help desk that happens to know Macs.

  • Zero touch: we pre-stage every Mac so the apps for that person's role install during Setup Assistant. They sign in, and it's ready
  • Automated: MDM managed in Terraform and deployed through CI pipelines, so every change is versioned, tested and repeatable. How
  • Certified: every one of us is Jamf 400, and a genuine macadmin. Meet them
  • Any MDM: Jamf, Iru (Kandji), Intune, Workspace ONE, Mosyle. The full list

Zero touch, in three steps

  1. 1We pre-stage itTheir role's apps and settings, queued in the MDM before the box ships.
  2. 2They sign inSetup Assistant installs everything while they watch. Nothing else to type.
  3. ✓Ready to workDesigner gets the design apps, finance gets finance. Any MDM.
Still on the MDM you started with? Kandji is now Iru, Workspace ONE is now Omnissa, and Jamf has changed a lot. If yours has drifted, our migration agent moves an estate with a few clicks per user. What switching involves →

Book an intro call

30 minfree intro call, with a macadmin

Tell us what you've got and where it hurts. We'll tell you straight what we'd do, and whether you need us at all.

For comparison, most Apple resellers route you to a sales team first and an engineer second. Why we don't

Already on an MDM? Bring it. We work with all the major ones, and the first thing we'll do is check it's set up the way the vendor intended. Most aren't.
  • Any size, from a studio of ten to estates in the thousands
  • You talk to the person who'd do the work, not an account manager
  • No follow-up sequence. If it's not a fit, we'll say so on the call
Optional: roughly how many Apple devices?

Or email letstalk@onemorething.co · call +44 7518 340918

2002the year we started. Apple only, ever since
8macadmins. Every one Jamf 400
10 → 1,000sdevices per estate, and we've grown clients from one to the other
0sales calls before you reach an engineer

The MDMs we run every day

Vendor-neutral. We'll set up, fix or move whichever one you have, and tell you honestly if it's the wrong fit.

Jamf Iruformerly Kandji Microsoft IntuneMicrosoft Intune OmnissaWorkspace ONE Mosyle + moreAsk us about yours
Accredited
Jamf Partner · Apple Consultants Network · Cyber Essentials Plus · ISO 27001 · G-Cloud · CIS SecureSuite
Certified
Whole team Jamf 400 · Jamf Educator · Apple Device Support & Deployment · Microsoft MD-102 & SC-300 · Okta · Google Workspace · VMware VCP Who holds what

What we do

Eight things, done properly. Most clients start with one and end up with most of them.

  1. 01
    Zero-touch deployment
    Pre-staged in the MDM, so the right apps for the person's role install in Setup Assistant. They sign in, done. No imaging, no desk visits.
  2. 02
    Automated patching
    Apps and macOS kept current without chasing anyone, so unpatched software stops being your weakest point.
  3. 03
    Account provisioning
    Identity joined up with your directory. Joiners start on day one, leavers lose access the same day.
  4. 04
    CIS-level security
    Encryption, firewall, passwords and certificates enforced to CIS benchmarks, with a report on every device record.
  5. 05
    Smart reporting
    The health of every endpoint at a glance, and smart groups that decide who gets which app, profile or policy.
  6. 06
    MDM migrations
    A custom migration agent, deployed from your current MDM. Users click a few times; we handle the rest.
  7. 07
    Infrastructure as code
    Your MDM configuration in Terraform, changed through a CI pipeline. Reviewed, tested, versioned, and rebuildable from scratch.
  8. 08
    Estate health checks
    A one-day audit of what you already have, with a written list of what's wrong, what's fine, and what to do first.

Each one explained properly →

Three ways to start

Fixed scope, fixed price, no retainer required. Most clients begin with one of these and decide what comes next from the result.

One day · fixed price

Estate Health Check

Every policy, profile, script and group in your current MDM, checked against the vendor's intended setup and the CIS benchmarks. You get a written list: wrong, fine, do first.

  • Any MDM, any size
  • Report within five working days
  • Fix it yourself, or ask us to
Book a health check

Two to four weeks · fixed price

Zero Touch, Done

Apple Business Manager, your MDM and your identity provider joined up, persona-based app sets, and a Setup Assistant flow that installs them. The next Mac you buy ships straight to its owner.

  • Pilot group first, then everyone
  • Existing devices enrolled without wiping
  • Your help desk trained as we go
Talk about zero touch

In phases · scoped on the call

MDM as Code

Your MDM configuration in Terraform, changed through a pull-request pipeline, rebuildable from a repository. Delivered step by step, with your team learning each piece as it lands.

  • Start from any console-managed estate
  • Test tenant before production, always
  • Tutorials and coaching included
How it works

Prices on the intro call, in writing, with no surprises. Already know what you want? letstalk@onemorething.co.

Not ready for Terraform? We go step by step

Nobody has to jump from a web console to a CI pipeline in one go. We meet your team where it is, move one piece at a time, and make sure the people who'll run it can.

Start with what hurts mostUsually zero touch or patching. It works on day one, and it's the first thing we put under version control.
One step at a timeConsole today, exported config tomorrow, a pull request the week after. Each step is useful on its own.
Upskill the help deskWe train your technicians and service desk alongside the work, so they're running it with us, then without us.
Tutorials in plain languageOur own step-by-step guides, written for the person doing the job rather than the vendor's exam. Read the free ones on the blog.
Amit P., founder of onemorething.co

Who's behind it

onemorething.co was started in 2002 by Amit P., a Jamf 400 certified macadmin who got tired of watching good Macs managed badly. Today it's eight Apple specialists in London, run with one rule: we only hire genuine macadmins. No generalists, no sales team, nobody between you and the engineer.

Our clients range from small design studios and schools to media and entertainment groups, banks, fintechs and government-linked organisations, across several continents. Questions go to letstalk@onemorething.co and a person answers them. Meet the macadmins · Three case studies

Never managed Apple before? Start here

Four steps. You don't need an MDM, or a plan, to begin. Nothing is bought until step 3, and we'll tell you if you don't need to.

  1. Talk to us. A free intro call. We look at what you have, what's getting in the way, and whether an MDM would help. Book it.
  2. We design it. The right MDM for your size and sector, set up for zero touch, patching and your identity provider. You get a written plan, in plain English.
  3. We deploy it. Enrol existing devices without wiping them, ship new ones straight to people, and hand over documentation your own team can follow.
  4. We run it, or you do. Patching, reporting and support on a retainer, or a handover and a number to call when something breaks.
The jargon, explained: MDM, zero touch, ABM

MDM (mobile device management): the system that tells every Mac, iPhone and iPad what apps to install and what rules to follow, without anyone touching the device.

Zero touch: a new device, still in its box, goes straight to the person. When they switch it on, it enrols itself and sets itself up.

ABM (Apple Business Manager): Apple's free portal that links the devices you buy to your MDM. Schools use Apple School Manager. If you don't have one, it's step one.

Book the free intro call

Every job we do is a different one more thing

One more thing

One more thing · One login, then work · One fewer ticket · One estate, any MDM · One box, zero touch · One team of macadmins

Next: What we do →