
On the Mac with Apple silicon, choose Apple menu > Shut Down. If the serial number of the MDM-managed Mac doesn’t appear in Apple School Manager or Apple Business Manager, the MDM administrator can ask a local administrator to manually change the security policy to Reduced Security to authorize remote management of kernel extensions. This management can be authorized automatically if the serial number of the MDM-managed Mac appears in Apple School Manager or Apple Business Manager. If an organization-owned Mac is enrolled in mobile device management (MDM), MDM can remotely manage kernel extensions and software updates. Before a legacy system extension (also known as a kernel extension or kext) can be installed on a Mac computer with Apple silicon, the security policy must be changed to Reduced Security.

By default, your Mac uses the highest level of security, called Full Security.


