Mac returned device refresh runbook (previously-used device -> new user)

Mac deployment
Windows deployment
Mac returned-device refresh
Windows returned-device refresh
macOS setup instructions

Goal: securely deprovision the prior user, remove activation/iCloud lock risk, wipe the Mac, and return it to a clean, company-managed state for reassignment.

Note: these are plain HTML forms with checkboxes. They do not save state unless you print to PDF or copy notes elsewhere.

0) Inputs you need (before touching the Mac)

1) Intake and hardware sanity checks

2) Deprovision prior user and remove cloud lock risk

Risk to avoid: the Mac is wiped but still bound to a personal Apple Account (Activation Lock / Find My), leaving the company without a recovery path.

3) Secure erase (factory reset)

4) Reinstall/restore macOS to a known-good state

5) Baseline security and reassignment handoff