BYOD or personal devices should be enrolled using Device enrollment (in this article). ✔️ To enroll existing devices, see Enroll Macs after Setup Assistant (opens another Microsoft article).ĭevices are user-less, such as kiosk or dedicated device. You create an enrollment profile in the Intune admin center, and push this profile to the devices.įor more specific information on this enrollment type, see Automatically enroll macOS devices with the Apple Business Manager or Apple School Manager. These devices are purchased from Apple, have your preconfigured settings, and can be shipped directly to users or schools. It enrolls a large number of devices, without you ever touching the devices. This option configures settings using Apple Business Manager (ABM) or Apple School Manager (ASM). Use on devices owned by your organization. Previously called Apple Device Enrollment Program (DEP). Automated Device Enrollment (ADE) (supervised) For some guidance on communicating with your users, see Planning guide: Step 5 - Create a rollout plan. Be sure to provide guidance, including what information to enter. Users typically don't like enrolling themselves, and may not be familiar with the Company Portal app. If they don't approve, then they're not enrolled, and won't receive your policy and profiles.įor more specific information on the end user steps, see Enroll your macOS device using the Company Portal app. When users approve, the device is enrolled, and considered managed. Open the Company Portal app, and sign in with their organization account ( Once they sign in, they must approve the enrollment profile (System preferences).Download and run the Company Portal app installer package.For more specific information on the end user steps, see Enroll your macOS device using the Company Portal app. Then, it's available to Intune to receive your policies and profiles.īe sure to communicate this information with your users. When they approve, the device is added to your organization Azure AD. Once they enroll, they must approve the enrollment profile. They sign in with their organization account ( and then step through the enrollment. Users must manually download and run the Company Portal app installer package. There isn't a Company Portal app for macOS devices in the Apple App Store, or through VPP. For more information, see Get an Apple MDM push certificate. This certificate is required to enroll macOS devices. User-less devices should be enrolled using Automated Device Enrollment (in this article) or Apple Configurator.īe sure the Apple MDM push certificate is added to Intune, and is active. But, by default, devices are marked personal.ĭevices are user-less, such as kiosk, dedicated, or shared. You can add the MacBook serial numbers to the corporate device identifiers to mark the devices as corporate. Organization-owned devices should be enrolled using Automated Device Enrollment (in this article) or Apple Configurator. ❌ Not recommended for organization-owned devices. If you don't want to factory reset, then contact the MDM provider.ĭevices are owned by the organization or school. The quickest way may be to unenroll, or factory reset the devices. ❌ When a device enrolls, MDM providers install certificates and other files. ✔️ Be aware of impact and any limitations using DEM account.ĭevices are managed by another MDM provider. You use the device enrollment manager (DEM) account. Need to enroll a few devices, or a large number of devices (bulk enrollment).ĭevices are associated with a single user. Use for personal or bring your own devices (BYOD). Before you beginįor all Intune-specific prerequisites and configurations needed to prepare your tenant for enrollment, see Enrollment guide: Microsoft Intune enrollment. So, be sure to add or update existing tips and guidance you've found helpful.
0 Comments
Leave a Reply. |