Features you're paying for
but probably don't need

If an employee loses their laptop, you want them to be able to wipe it themselves. And they can, with native tools on every OS. Giving your company the ability to remotely wipe an employee's personal device is a different thing entirely, and most people don't think hard enough about what that means until they're on the wrong end of it.

Brilliant if you're shipping 200 pre-configured MacBooks to new hires every month. If you're a 15-person SaaS team onboarding two people a quarter, you're buying a forklift to move a couch.

Pushing apps to devices centrally is genuinely useful at scale. At 20 people, you send a Slack message. It's fine.

Locks a device down to a single app. Useful for retail displays and airport check-in terminals. Probably not your situation.

Triggers actions based on where a device is physically located. If you're tracking the location of your remote employees' laptops, you have bigger problems than compliance.

Routes specific app traffic through a VPN tunnel at the OS level. Serious infrastructure capability, and serious complexity. If you need this, you'll know. Most teams don't.

Push firmware updates to devices remotely. Relevant for managing fleets of rugged hardware in logistics or healthcare. Not relevant for your developer team's MacBooks.

Fine-grained permissions so different IT team members can manage different device groups. Useful when you have an IT team. Less useful when the IT team is you, and also the CEO, and also currently on a sales call.

Control screens, lock devices, and manage student attention during lessons. Genuinely useful. For schools. Not for you.

Deep hardware-level management for Samsung Android devices. Excellent if you're deploying corporate Android fleets. A feature you are actively paying for in most MDM tiers regardless.