macOS Configuration Profiles - Manage macOS in Intune (5/10)

In this video, we create three macOS Configuration Profiles and apply to our newly enrolled mac.
1. Microsoft Automatic Updates policy to enable it
2. Software Updates policy to ensure macOS updates are installed
3. Enable file system encryption, FileVault (this one failed due to running Monterey, which requires Ventura 13.4.0)
To create a AzureAD group to include all enrolled macOS devices:
(device.deviceOSType -eq "macMDM")
Full Playlist: • Learn to master and ma...

[@ibrahimabdeltawab6418]

So informative, thanks so much

[@petere8971]

Hello, thank you for your nice videos. Do you have a video that explain how to configure macOS system and kernel extensions in Intune ? So that we don't have validated "system extension" that are by default bloqued ?

[@IntuneVitaDoctrina]

Oh that is an excellent topic! could use PPPC Util and create .mobileconfig file and deploy. Love the idea - as it is nearly a must to have to manage macOS. I'm going to add that to my list of videos, I got two other ideas I would like to execute before this one but it is on the list, huge thanks.

[@user-om3wn8ex1r]

How can you manage an admin account where policies do not apply to that user profile? How can you exclude a user from configuration policies to manage a device? On a mac device

[@IntuneVitaDoctrina]

I might not have understood the question fully, but I hope so.
If you want to exclude a specific user, then assign to a AzureAD user based group, and either just not have the user in that group or add it to an exclude AzureAD user Group.

[@TheLegendStrike]

How do you handle updates for Silicon CPU mac devices?

[@IntuneVitaDoctrina]

Same way as Intel. I’m also using a nice free tool called Nudge to help users to run the updates. Might do a video about that