Automated Device Enrolment using Intune
Вставка
- Опубліковано 2 жов 2024
- Hi and welcome to Episode 6 in the iOS and macOS management video series.
In this video I take you though enrolling an iOS device using Automated device enrolment or ADE into Intune and we look at the settings, profiles and end user experience with enrolling.
Check out the full series of videos for iOS and macOS MDM management with Microsoft Intune. See previous video links below.
Episode 1 - • iOS and macOS Manageme...
Episode 2 - • iOS and macOS Manageme...
Episode 3 - • Manually add devices i...
Episode 4 - move2modern.uk...
Episode 5 - Add devices to ABM using the configurator app on an iPhone - • Add a macOS device to ...
Andy Jones is a Microsoft Technical Architect at BT and Organiser at CloudManagement.... He's on Twitter @Andy_69Jones. Any views or opinions expressed here are his own.
Amazing work, well explained. Many thanks!!
Thanks, useful stuff
Thanks!
Really helpful! Thanks.
What application did you use to cast the iPhone during setup process?
A macOS device, connected via cable, can do this. /dean
Thanks for this video. It was helpful. I just have one question I did notice I am unable to add card, passes or tickets to the wallet app. Any idea why that is? Thank you.
Excellent,Excellent,Excellent,Excellent video. Thank you so much!
Awesome work! These videos really helped me with setting this up for my company. Thanks again for these awesome videos.
Many thanks
Hi there, first i'd like to say thank for the iOS & macOS management playlist, It's be a great resource. I've been having trouble with the Locked enrollment option when creating a profile. Even though i selected yes, on the device itself i have the option to remove it by entering the passcode rather than it not being there. Any ideas as to why this would be? Thank you in advance
What happen if you chose to take control over the token from another MDM ? My organisation is moving from another MDM to Intune, should i take control or just renew the vpp token?
Excellent and super detailed presentation. Thanks a lot! Btw, may I ask you how you got the iPhone screen mirrored in your presentation?
Hi @Maximaximale thanks so much for your support and glad you are liking the series. I use two apps for mirroring phones to my Mac when recording. These are Vysor and APowerMirror. There are definitely better options out there though Like Reflector 3.
Helped me out so much. Thank you.
Why is it automated if the user has to enter their details in the company portal application?
For Authentication method my only options are Setup Assistant and Setup Assistant with authentication. Company Portal option is missing
Hi, great content. Would you setup different profiles for your company owned devices and your BYOD? If so would you be able to create a dynamic group for each and define it, or would you manually add devices to a group and assign the profiles accordingly?
Back then I did it like this. Assigned Enrollment-Profile ("iOS Tab Profile") --> Dynamic Group (rule: device.enrollmentProfileName -eq "iOS Tab Profile") --> Assigned the group to apps, configuration and restriction profiles. But is this really common practice? It's necessesary to reset a device in order to remove it from the dynamic group.
Any idea why my VPP token won't populate when creating a Profile?
If you can send more info am happy to try and help
@@theCMC I managed to figure it out, user error :P Thanks for the follow up
Why is it necessary to assign the MDM server .... If not assign the server then devices will not replicate in the intune
Hey could you make similar video for macbook, stuck at Credentials for remote management. Thank you.
Hi! I am about to release a few videos covering MacOS ADE over on my other channel:
youtube.com/@DeanEllerbyMVP
@@theCMC Thank you i already bought your course at udemy but didnt notice that problem.
No problem. The Udemy course is Intune for Windows. The UA-cam channel has more content on Apple.
Im recording the ADE for MacOS video right now :-)
Hi more content is also on its way on the CMC channel which will cover this
Hi, great content ! What ios emulator do you use for the demo ?
Thank you for a very good videos. I would like to ask about VPP license. In MS documentation is written that "Devices will be blocked from enrolling if there aren't enough Company Portal licenses for a VPP token, or if the token expires."
I am not sure if i understand this. Do i need any special licenses when i want install free apps (excel, word, etc) and deploy it thorough intune?
DUBnotTrap you still need to purchase licences for any apps deployed using VPP even if they are free. Purchase them in ABM with the required number for your users/devices
@@theCMC Does the Purchase means its Cost to Company?
If we add VPP Token & only use Free apps aaded, still do we billed?
hey thanks!! I couldn’t find episode 4 in the playlist.
Thanks this one is actually a blog.move2modern.uk/index.php/2023/03/01/episode-4-manually-add-a-macos-device-to-apple-business-manager-abm/
Thank you for the excellent explanation and blog !!
One query :
There is a following note in the blog
11. Mac: its important to know that when enrolling your Mac into Intune, do not re-start the device until you have successfully assigned the Mac to your chosen Intune mdm server within ABM. You will also need to sync the device to Intune and assign an enrolment profile before going through the end user setup assistant process..
I have restarted the device. how do I get back to setup assistance here ?
I have a question regarding users on Multiple devices. We currently have users on iPhones and have a specific profile for that. We are now in the process of moving some users from laptops over to iPads. Once I create the iPad Profile and assign the users to the groups will this affect what is being pushed to their iPhones or because I will be assigning specific devices to the enrollment profile it will only go down to those devices?
Rachel if the profile targets devices in a group as you suggest and they are iPads, then only those devices will receive it. I would suggest using filters with any other policy/profile/ apps etc created
Thanks for these great tutorials. However I am having a problem during the app enrolment it is asking me to enter an iCloud login to install the app from Intune which I believe should be automatically installed or pushed from Intune. Could anyone assist me.
Hi @user-xm2xd6ts3i,
Are you using supervised devices?
Check this option
“Require iTune store password for all Purchase”
If it is Yes. Then it will ask password for all app install
Can you do a video about handling auto-deployment of devices that need different apps, configuration and restriction profiles? Is this done by dynamic groups or what's common practice in this case? How to setup the structure for this?
yes you can use dynamic groups or filters added to the policies
Hi, I'm looking for the episode 4. May you send me a link? I can't find it. THXS
No problem Massimo move2modern.uk/index.php/2023/03/01/episode-4-manually-add-a-macos-device-to-apple-business-manager-abm/
Thanks for watching
Any idea why mine takes over an hour to get past the “configuring iPhone” page?
Difficult to troubleshoot this without addition detail but this sounds like something has gone wrong or there is a connection issue. Did you get this resolved ? If you have any info to share for others please do so
Question, do we need to subscribe to Apple Business Manager in order for any of this to work?
Hi yes you will require a subscription to ABM for ADE. You will need to enrol your business unfortunately. Take a look at the process here business.apple.com/#/enrollment/form
Hi there! Can you please give me some clarity on where you got the VPP file, I have the dowloads from previous eposides but can not pin point which is the file I should be using there. Thank you!
That would be in episode 6
VPP is setup in ABM where you purchase apps in bulk and assign to your MDM server then sun to Intune
Hi there, How do you download an app that you need before you sign into Company Portal? ie - I need to download "Microsoft Authenticator" before I sign into Company Portal, otherwise I can't get past the requirement for 2FA. From your video, it seems that the apps you've specified get downloaded after Company Portal, as they are assigned to the user. Can apps be assigned to a device, and thus downloaded before Company Portal sign in?
Hi Steven, my understanding is where the device is being fully managed (supervised) the apps and policies are downloaded and installed as part of the company portal login which is where the licenses are assigned. this doesn't prevent the end user installing the authenticator app form the store themselves though before logging in. As you point out the timing is the key point and many organisations I have worked with using Authenicator they have another device from which they process MFA or use a different form of MFA without the authenticator app.
@@theCMC turns out you can do this by assigning the app to all devices (instead of all users) - then it will be installed as the device is set up & before the user has even opened Company Portal...
When are you planning to do the video on Cellular data plans with eSIM? Thank you so much.
Hopefully soon as may be doing some testing next week.
@@theCMC Will be waiting :)
Really well explained, Thanks!
Thank you glad you liked it 🙏