Apple Business Manager (Now Apple Business) for a Small Business

Apple Business Manager is now Apple Business: what changed

On 24 March 2026 Apple announced Apple Business, which went live on 14 April 2026 and replaced Apple Business Manager, Apple Business Essentials and Apple Business Connect. It is a free service. Existing Apple Business Manager organisations carried over, so if you set one up years ago, sign in at business.apple.com with the same admin account.

The biggest change for small firms is that device management is now built in. Before, you needed a separate MDM product to do anything useful with Apple Business Manager. Now Apple's own service can push Wi-Fi, passcode rules, FileVault and apps through templates Apple calls Blueprints. You can still connect an external MDM, or use both.

Source: Apple's feature availability by country. Singapore businesses still need Microsoft 365 or Google Workspace for email; Apple's mail service is US-only for now.

Sign up and verify your organisation

Sign-up takes minutes, but verification is what unlocks the useful features. Apple's sign-up guide says you have 60 days to verify, it needs two verification methods, and it can take up to five business days. If the organisation isn't approved in that window, the organisation, its data and its Managed Apple Accounts are deleted. Staff with Managed Apple Accounts can only sign in on devices after verification.

1. 1

   Pick the admin account carefully

   Use a work address for the first Organization Administrator, not one already used as an Apple Account for the App Store or iCloud. Apple rejects role names such as "IT Coordinator"; it must be a real person's legal name.

2. 2

   Sign up at business.apple.com

   Enter the company name, address and website. The website field is optional but Apple says it can speed up verification. Confirm codes sent to your email and phone, then accept the terms.

3. 3

   Choose two verification methods

   Options are a Business ID (a D-U-N-S Number or US EIN), domain validation with a DNS TXT record, an App Store Connect app, or an uploaded document such as a business licence, lease or utility bill. For most Singapore SMEs, domain validation plus a document is the quickest pair.

4. 4

   Add a second administrator

   Once verified, create a second admin so a single person's departure or lost phone doesn't lock the company out.

5. 5

   Verify your email domain

   Add and verify your company domain so Managed Apple Accounts use it, and so staff can't create personal Apple Accounts on it later without you seeing them.

Managed Apple Accounts: work accounts owned by the business

A Managed Apple Account is a work Apple Account the company creates and controls. Apple says work and personal data are cryptographically separated on the device, so the company manages its data while the employee's personal data stays private. Accounts can be created by hand or synced from Microsoft Entra ID or Google Workspace, which means a new hire in your email system can automatically get an Apple work account.

• Use Managed Apple Accounts for company-owned devices and for work data on staff phones.
• Connect Microsoft Entra ID or Google Workspace so staff sign in with their normal work password and MFA.
• Don't let staff sign company Macs into their personal iCloud for work files; use OneDrive, Google Drive or iCloud under a Managed Apple Account.
• When someone leaves, disable their account in Entra ID or Google Workspace and confirm it is deactivated in Apple Business.

For staff-owned phones, pair this with a written BYOD policy. Our BYOD policy and MDM guide explains what a company can and can't see on a personal device.

Buy devices so they enrol automatically (zero-touch)

Zero-touch deployment means a new MacBook arrives sealed, the employee switches it on, joins Wi-Fi, and it pulls down company settings and apps on its own. This only works if the device's serial number is in your Apple Business account. Apple's device supplier guide explains how purchases get there:

• Buying from Apple: enter your Apple Customer Number in Apple Business.
• Buying from an Apple Authorized Reseller or authorized carrier: give them your Organization ID, and add their Reseller Number to your account.
• Ask before you order whether the reseller participates in automated enrolment; not every shop does.
• Devices bought elsewhere, or older devices, can be added with Apple Configurator on an iPhone. A Mac must have Apple silicon or a T2 chip, and must be erased first.

If you are choosing hardware, our Mac vs Windows guide covers the trade-offs for a small office.

Built-in device management or an external MDM like Intune?

Apple's device management guide says you can use the built-in service, link an external one, or both. The right choice depends on what else you run.

Linking an external MDM uses a service token. Apple notes that external tokens expire after one year and some MDMs don't warn you. Put a calendar reminder 11 months out. Our Intune setup guide walks through connecting Apple devices to Intune, and the BitLocker and FileVault guide covers the encryption policy itself.

Offboarding: when staff leave or devices are sold

Most problems with company Apple devices appear at the end of their life: a laptop locked to a former employee's Apple Account, or a device that keeps re-enrolling into management after it was sold. A short routine prevents both.

Apple's release devices page warns not to release devices sent to Apple for repair, because a replacement unit then won't appear in your account. After release, you can no longer manage Activation Lock for that device through Apple Business.

Do it yourself or get help?

A company with three to five Apple devices and someone comfortable in admin consoles can set up Apple Business and the built-in device management in an afternoon, plus the wait for verification. Help is worth it when you mix Macs with Windows, want Intune and Conditional Access, or need encryption keys escrowed and a tested leaver process.

Our Device Encryption & Management package (S$490) sets up Apple Business, enrolment, FileVault with key escrow, baseline policies and an offboarding checklist on accounts you own. If you also need the wider Microsoft 365 controls, see our Microsoft 365 / Google Security Lockdown (S$590).