Users: Enable Activation Lock

You can use Activation Lock to protect your macOS device. Activation Lock is automatically enabled when you turn on the Find My Mac app on your device. You’ll need your Apple ID password and device passcode. 

When you turn on Find My Mac, your Apple ID password or device passcode is required before anyone can turn off the Find My Mac app, erase your Mac, or reactivate and use your Mac. 

Prerequisites:

• Your IT Admin has configured Mobile Device Management (MDM) for your organization. See Set up Apple MDM. 
• Your IT Admin has configured Apple’s Automated Device Enrollment for your organization. See Configure Automated Device Enrollment.
• Your IT Admin has enrolled your device in Mobile Device Management (MDM). See Choose an MDM Enrollment Method. 
• Your macOS device must meet these requirements to be eligible to enable Activation Lock:
  • The device runs macOS 11 or later.
  • The device uses the Apple T2 Security Chip or Apple silicon.
  • Installations (not upgrades) of macOS 11 (Big Sur) or later require the device to be supervised. 
  • Your Apple ID must have two-factor authentication enabled.
  • Secure Boot is enabled on its default setting (Full Security) with Disallow booting from external media selected under External Boot.

To enable Activation Lock:

1. Turn on the Find My Mac app by following the instructions in the Apple documentation.
2. Verify with your IT Administrator that you are part of an Allow Activation Lock policy. See Create a Mac or iOS Activation Lock Policy.
3. Verify that Activation Lock is turned on for your device:
   1. Choose the Apple menu and About This Mac.
   2. Click System Report.
   3. Click Activation Lock Status under Hardware.