Your new hire starts Monday. You've signed the contract, done the welcome call, set up their email — but nobody has thought about the laptop. Now it's Friday and you're either asking someone to drive a device across town, setting up an awkward office visit, or scrambling to find a courier who can configure hardware in transit.

This is the most common IT failure in remote onboarding. And it's entirely avoidable.

This article explains how to ship a pre-configured laptop directly to a remote employee, what needs to happen before the device leaves the warehouse, and how to make sure that on Monday morning your new hire opens a box, turns on the device, and is productive within minutes — without calling anyone for help.

Why Remote Laptop Onboarding Goes Wrong

The traditional process was designed for offices. A new hire comes in on their first day. IT hands them a device. IT has already set it up. Everyone is in the same building.

Remote work broke that model in three places:

The logistics problem: Who ships the device, where, and when? If procurement, IT, and HR aren't coordinated — and in most SMBs they aren't — the device either arrives late, goes to the wrong address, or ships before it's been configured.

The configuration problem: Shipping a device to an IT office for configuration before forwarding it to a remote employee adds days or weeks to the onboarding process, and distributed workforces have made that workflow impractical. Manual configuration also means inconsistency — a device set up by one person on a Tuesday afternoon will be configured differently from one set up by someone else under time pressure on a Friday. Hemmersbach

The first-day experience problem: 60% of remote hires feel disoriented after their first week. A laptop that doesn't arrive on time, or arrives but requires a two-hour setup call with IT, makes a difficult situation worse. Technology is the remote employee's entire workplace — when it doesn't work, nothing works. ProProfs

The answer to all three is the same: remove manual steps from the process entirely.

What Zero-Touch Provisioning Actually Means

Zero-Touch Provisioning (ZTP) is the process of enrolling and configuring a device before it ships, so that when the employee turns it on for the first time, it sets itself up automatically — installing the right apps, applying the right security policies, and connecting to the right accounts, without anyone manually touching the device.

The employee unboxes the device, signs in with their work credentials, and the device installs every app and policy needed. That's it. No setup call. No instruction manual. No asking a colleague how to connect to the VPN. NetNXT

The technology that makes this possible for macOS is the Apple Business Manager (ABM) combined with an MDM platform. For a device purchased through Apple or an authorised reseller, the serial number is registered in ABM before shipment. When the device first connects to the internet, it identifies itself as corporate-owned, downloads its configuration profile from the MDM, and applies every setting you've defined — software bundles, security policies, disk encryption, screen lock, approved apps.

The employee's only job is to turn it on, connect to Wi-Fi, and log in.

The Process: From Hire to Ready in Five Steps

Here is what the complete remote laptop onboarding process looks like when it's properly set up:

Step 1 — HR submits the new hire details
Name, role, start date, home address. That's the only input required from the HR side. In a Personio or HiBob integration, this can trigger the entire downstream process automatically — the new hire record in the HR system starts the IT onboarding workflow without any manual handoff.

Step 2 — Device procurement and profile assignment
Based on the role, a device is selected from stock or ordered. The serial number is registered in Apple Business Manager and linked to the appropriate configuration profile in the MDM — the set of software, policies, and access permissions defined for that role. A marketing manager gets different apps than an engineer. This happens before the device ships.

Step 3 — Direct shipment to the employee's home address
The device ships sealed, directly to the employee. No IT office detour. No intermediate stop. Delivery time depends on logistics — with deeploi as a certified Apple partner, devices typically arrive within a few business days. The employee gets a tracking link.

Step 4 — Employee turns on the device
The device connects to Wi-Fi. It recognises its own serial number in Apple Business Manager. It contacts the MDM server. The configuration profile downloads automatically. Apps install. Security policies apply. Disk encryption activates. The whole process takes under five minutes of active time from the employee.

Step 5 — Employee logs in and starts working
With Google Workspace or Microsoft 365 integrated into the MDM, the employee's accounts are already provisioned. They log in with their work credentials, and everything is there — email, calendar, Slack, the tools their role requires. No setup call. No instruction sheet.

What Needs to Be in Place Before This Works

Zero-Touch Provisioning doesn't require a large IT team — but it does require some one-time setup. Here's what needs to be in place:

An MDM platform: The device management system that holds the configuration profiles and pushes them to devices. For macOS, this works via Apple Business Manager. deeploi provides this as part of the platform — you don't need to configure or maintain it yourself.

Role-based configuration profiles: Before the first remote hire ships, someone needs to define what each role's device looks like — which apps are installed, which security policies apply, which accounts are provisioned. With deeploi, these profiles are set up once and applied automatically to every new device of that type. See our MDM guide for more on how profiles work.

Procurement through authorised channels: For Apple Business Manager to work, devices must be purchased through Apple directly or an authorised reseller. deeploi is a certified Apple partner — devices procured through deeploi are automatically registered in your ABM account and ready for zero-touch enrollment.

HR system integration: Connecting your HR system (Personio, HiBob, BambooHR) to deeploi means the moment a new hire is added to the HR system, the IT provisioning process starts. No manual trigger. No email to IT. The integration handles the handoff.

What the Employee Receives

Beyond the device itself, a good remote onboarding package should include:

A welcome message before the device arrives: The employee should know the device is coming, when to expect it, and what to do when it arrives. A brief pre-boarding email with the tracking link and three sentences of instructions (turn it on, connect to Wi-Fi, log in with your work email) removes any uncertainty.

Everything pre-installed: The employee should not have to install any software. Every tool they need — communication, project management, security, productivity — should be installed and ready on first boot. If they need to ask "how do I get Slack?" something has gone wrong in the profile setup.

IT support available on day one: Even with zero-touch provisioning, questions arise. A clear IT support channel with a defined response time means first-day issues get resolved in minutes, not hours. With deeploi's IT support averaging 12 minutes response time, employees never wait long.

A pre-configured security baseline: MFA enabled, disk encryption on, screen lock set, endpoint protection installed. The employee doesn't configure any of this — it's done at the platform level before the device ships.

The Manual Process vs. Zero-Touch: A Comparison

What Happens When the Employee Leaves

The same system that makes onboarding seamless handles offboarding with equal reliability. When an employee is marked as leaving in the HR system, the MDM triggers the offboarding workflow: all accounts are revoked, all company data is removed, and the device can be remote-wiped if it isn't returned. The recovery process — with a pre-paid return label sent to the employee — is handled by deeploi, not by someone in your team.

This matters for remote employees specifically because the traditional offboarding assumption ("they'll hand in the laptop when they come in") doesn't apply. A clean, automated offboarding process ensures company data doesn't remain on devices after the employment ends — which is both a GDPR requirement and a practical security control.

Conclusion

Remote onboarding doesn't require complexity. It requires the right setup: devices procured through the right channels, enrolled in an MDM before they ship, and delivered directly to employees with a configuration that makes them productive on first boot.

The companies that get this right don't spend more on IT — they spend less, because they've removed the manual hours from every hire. They also create a better first impression: the employee who opens a box on Monday morning and is working by 9am feels valued in a way that a chaotic, delayed setup never achieves.

A strong onboarding experience during the first 90 days makes employees 10 times more likely to stay. The laptop is the first touchpoint. Make it count. HR Cloud

Book a demo and see how deeploi handles remote device provisioning from end to end

Frequently asked questions

Does Zero-Touch Provisioning work for Windows devices as well as Mac?

‍At deeploi, Zero-Touch Provisioning is currently available for macOS devices via Apple Business Manager. Windows devices are enrolled in the MDM after delivery — the employee receives a pre-configured device that prompts for MDM enrollment on first login. The end result is comparable, though the enrollment mechanism differs between platforms.

What if the employee's internet connection is slow or unreliable?

‍The initial setup process downloads the configuration profile and installs apps over the employee's home connection. For most standard software bundles this is not an issue. For roles with large software requirements, consider pre-installing the most critical apps before shipment and scheduling heavier downloads outside working hours. A fast connection helps, but the process is designed to be resilient.

How long does it take to set up Zero-Touch Provisioning for the first time?

‍The one-time setup — connecting Apple Business Manager, configuring the MDM profiles, integrating with your HR system — typically takes one to two weeks with deeploi. Once in place, each subsequent hire requires no IT setup time at all. The upfront investment pays back on the second or third remote hire.

What happens to the device when an employee leaves?

‍The MDM triggers the offboarding workflow: all company accounts are revoked, company data is removed from the device, and the device can be remote-wiped. deeploi coordinates the physical return via a pre-paid return label sent directly to the employee. The full process runs without requiring anyone in your team to chase the device.

Can deeploi procure the device as well as manage it?

‍Yes. As a certified Apple partner, deeploi handles device procurement, registration in Apple Business Manager, MDM enrollment, profile configuration, and direct shipment to the employee. HR submits the new hire's details — role, start date, address — and deeploi handles everything from that point.