This is why I love our industray. I get assigned an InTune managed iOS device project, having never managed any Apple device in InTune before. A few videos later from some fellow Aussies and I am ready to get into pilot testing a device :) I 'll have to work out the shared devices idiosyncrasies but that's really it. Thanks fellas.
Thanks for the reboot! And don't forget, sometimes you need to click on top, sometimes you need to click the dots and infuriatingly sometimes you need to right click... (e.g. to remove a user form a shared iPad)
As always, very informative video. Any way y'all could do one that goes over enrolling the device as a Microsoft Entra Shared Mode device? I'm so lost on how SSO works on it with multiple users. I've set it up to test, but I am not sure I'm doing it right and I haven't found much documentation or any good videos on it. The purpose I am trying to fulfill is to provide an iPad for a certain Team that will need to have one user using it when they are in the office as an alternative to using a laptop, but it is also going to be needed for other users to use for events where they may play music connected to a bluetooth speaker or have it setup to do surveys so they can hand it to people to fill out. We are a University in Texas, and this will be used for multiple purposes and multiple users. So, I didn't think doing Enroll with User Affinity was the way to go. Any videos you could do on this particular mode would be great! Thanks guys!
The company portal variant isn't compatible with the latest iOS versions anymore. Microsoft has an article on this that company's should switch. Also missing the new JiT enrollment solution in this video 😊
You guys are really helping me with migrating to Intune at work, I greatly appreciate it How do you create/generate managed Apple IDs? Also idk if you mentioned it and I missed it but can you force the user to sign in to Company Portal?
Thank you. Please update the video in Playlist and we’re is the video with Configure Supervisor to add iPhones in ABM that you don t have invoice or provider that can add them.
thanks very much for the video. I have used this as a guide but not sure if I've missed something. When trying to install apps via company portal I get hit with the apps requesting apple ID to download. Is there something I can check to prevent this?
Awesome video - Would you mind to share which screen mirroring tool you are using? Maybe another detail that weren't mentioned in the video is that you can actually use a TAP in the setup assistant while getting the prompts, because if you have CA-policies deployed that enforce authenticator registration for the first time the setup wizard will freeze/keep spinning and doesn't support registration when using "Setup Assisstant with Modern auth/JIT". It seems like in order to bypass the "authenticator registration prompt" you need to add an "Authentication method" before hand like either "TAP" or "SMS/Voice call" to support it. However, if users has a second device they can easily complete the Auth app registration process in the setup assistant.
Looks nice, but how do you enforce the device/user to fully mdm enroll into Intune. People can skip that step and ignore CP and still use the phone and apps without it.
Hey Guys! I have a question regarding the screen sharing from the out of box experience. How were you able to record/achieve this? I'd like to create a video walk through/tutorial for my company when on-boarding new users and I'd love to create a video to give to new users instead of a long Word/PDF doc. This video was incredibly helpful so thank you so much for creating content like this.
We use a Blackmagic design atem mini, to capture the HDMI, with either a lightning to HDMI adaptor (you need to keep the firmware up to date on it, so can be inconsistent) or recently usb-c to HDMI with the iPhone 15 (heaps easier and works just out of the box as you'll see in some up coming videos)
Is there any option to try ABM in demo lab without all that paperwork? Any option to try it without providing all that business information, numbers etc 😅
i have installed apple configurator and trying to enroll devices to intune - i can see the devices in ABM but unable to enroll devices in intune- it shows it's ready to renroll. i made sure profile is assigned to device. later is reset deivce and it shows it controlled by my organisation but no apps are pushed like company portal etc. Can you please guide me what am i doing wrong. or do it have to install company portal manually
Awesome Video! Tough question here: Am I able to set up an iPhone with user affinity and register it to a user without entering a password during the enrollment process? This has been a requirement for a bunch of big corporations. Passwords are just bad when it comes to security and authenticating and I was wondering if it is possible to register an iPhone to a user without the user having to enter his M365 password. With VMware Workspace one you can enroll devices with a token that the user can generate himself in a self service portal. Is there a similar solution within Intune? Thanks in advance!
If your flying the passwordless flag the answer is yes, but it is configured in entra ID rather then Intune, as it controls the gate into the platform. You can force passwordless via conditional access policies on device registration
@@IntuneTraining Thanks for the Information! So password-less enrollment is possible. I did try it with TPA - Temporary Access Pass and it did work without any issues. We were originally trying to enroll an iPhone with Fido Keys (maybe even NFC capable once) but when enrolling an iPhon there is no option for Fido Key. So it seems like the iOS Platform is not capable of doing that. TPA is probably the best password-less option right? Best Regards and thx again!
Yes. We were just talking about doing a video on this soon. Short answer is use Configurator on an iPhone. You have to wipe the device then you hold it next to the phone with Configurator and it will display a QR code to scan to enroll. Super simple. Search Apple docs for Apple Configurator iOS App for instructions.
@@IntuneTraining already figured it out myself ;) Working without any issues, other than having to wait the initial 30days where the user can reclaim the phone.
Hi I have a quick question everytime i try to sign in on company portal. after sign in i get an error contact company support there isn't a device setup for this account yet contact support to setup a device. Do you happen to kno wthe reason
@@IntuneTraining Thankyou for the reply i dont have any comditional access setup and the grace period is 7 days still the same issue i a facing Thank you
This is why I love our industray. I get assigned an InTune managed iOS device project, having never managed any Apple device in InTune before. A few videos later from some fellow Aussies and I am ready to get into pilot testing a device :) I 'll have to work out the shared devices idiosyncrasies but that's really it. Thanks fellas.
I really like all your videos. keep up the good work. Your demos are amazing!
Thanks for the reboot! And don't forget, sometimes you need to click on top, sometimes you need to click the dots and infuriatingly sometimes you need to right click... (e.g. to remove a user form a shared iPad)
As always, very informative video. Any way y'all could do one that goes over enrolling the device as a Microsoft Entra Shared Mode device? I'm so lost on how SSO works on it with multiple users. I've set it up to test, but I am not sure I'm doing it right and I haven't found much documentation or any good videos on it. The purpose I am trying to fulfill is to provide an iPad for a certain Team that will need to have one user using it when they are in the office as an alternative to using a laptop, but it is also going to be needed for other users to use for events where they may play music connected to a bluetooth speaker or have it setup to do surveys so they can hand it to people to fill out. We are a University in Texas, and this will be used for multiple purposes and multiple users. So, I didn't think doing Enroll with User Affinity was the way to go. Any videos you could do on this particular mode would be great! Thanks guys!
The company portal variant isn't compatible with the latest iOS versions anymore. Microsoft has an article on this that company's should switch.
Also missing the new JiT enrollment solution in this video 😊
Hi! Do you have a link to the article about the compability issue?
You guys are really helping me with migrating to Intune at work, I greatly appreciate it
How do you create/generate managed Apple IDs?
Also idk if you mentioned it and I missed it but can you force the user to sign in to Company Portal?
If you have a macOS device, capturing the screen of an iPad or iPhone can be done easily with QuickTime over USB.
When does the Apple Configurator step alluded to at 8:05 come out?
Yes please do apple configurator❤
Maybe you can create also video about how to setup iOS SSO extension and how this is working with office365 apps?
Thank you. Please update the video in Playlist and we’re is the video with Configure Supervisor to add iPhones in ABM that you don t have invoice or provider that can add them.
Use Apple Configurator from an iPhone to enroll new or reset devices into ABM. Apple docs have good info on this.
thanks very much for the video. I have used this as a guide but not sure if I've missed something. When trying to install apps via company portal I get hit with the apps requesting apple ID to download. Is there something I can check to prevent this?
Awesome video - Would you mind to share which screen mirroring tool you are using?
Maybe another detail that weren't mentioned in the video is that you can actually use a TAP in the setup assistant while getting the prompts, because if you have CA-policies deployed that enforce authenticator registration for the first time the setup wizard will freeze/keep spinning and doesn't support registration when using "Setup Assisstant with Modern auth/JIT". It seems like in order to bypass the "authenticator registration prompt" you need to add an "Authentication method" before hand like either "TAP" or "SMS/Voice call" to support it. However, if users has a second device they can easily complete the Auth app registration process in the setup assistant.
Steve is using an ATEM MIni and OBS to display screens.
Looks nice, but how do you enforce the device/user to fully mdm enroll into Intune. People can skip that step and ignore CP and still use the phone and apps without it.
Hey Guys!
I have a question regarding the screen sharing from the out of box experience. How were you able to record/achieve this? I'd like to create a video walk through/tutorial for my company when on-boarding new users and I'd love to create a video to give to new users instead of a long Word/PDF doc. This video was incredibly helpful so thank you so much for creating content like this.
We use a Blackmagic design atem mini, to capture the HDMI, with either a lightning to HDMI adaptor (you need to keep the firmware up to date on it, so can be inconsistent) or recently usb-c to HDMI with the iPhone 15 (heaps easier and works just out of the box as you'll see in some up coming videos)
@@IntuneTrainingThank you!
Is there any option to try ABM in demo lab without all that paperwork? Any option to try it without providing all that business information, numbers etc 😅
Not that we found
i have installed apple configurator and trying to enroll devices to intune - i can see the devices in ABM but unable to enroll devices in intune- it shows it's ready to renroll. i made sure profile is assigned to device. later is reset deivce and it shows it controlled by my organisation but no apps are pushed like company portal etc. Can you please guide me what am i doing wrong. or do it have to install company portal manually
This video is great but I wish the Company portal would Autologin, it's a pain telling end users to login to the Company Portal after the fact.
we don't have official apple store in my country so cannot follow this waiting for next part ;)
Awesome Video!
Tough question here: Am I able to set up an iPhone with user affinity and register it to a user without entering a password during the enrollment process? This has been a requirement for a bunch of big corporations. Passwords are just bad when it comes to security and authenticating and I was wondering if it is possible to register an iPhone to a user without the user having to enter his M365 password.
With VMware Workspace one you can enroll devices with a token that the user can generate himself in a self service portal. Is there a similar solution within Intune?
Thanks in advance!
If your flying the passwordless flag the answer is yes, but it is configured in entra ID rather then Intune, as it controls the gate into the platform.
You can force passwordless via conditional access policies on device registration
@@IntuneTraining Thanks for the Information! So password-less enrollment is possible. I did try it with TPA - Temporary Access Pass and it did work without any issues.
We were originally trying to enroll an iPhone with Fido Keys (maybe even NFC capable once) but when enrolling an iPhon there is no option for Fido Key. So it seems like the iOS Platform is not capable of doing that. TPA is probably the best password-less option right?
Best Regards and thx again!
Tnx. I found it😅
Hi, is there any way to add existing company iPhones to ABM without Apple Konfigurator (because you do not have any Mac devices in your company)?
Yes. We were just talking about doing a video on this soon. Short answer is use Configurator on an iPhone. You have to wipe the device then you hold it next to the phone with Configurator and it will display a QR code to scan to enroll. Super simple. Search Apple docs for Apple Configurator iOS App for instructions.
@@IntuneTraining already figured it out myself ;) Working without any issues, other than having to wait the initial 30days where the user can reclaim the phone.
Hi I have a quick question everytime i try to sign in on company portal. after sign in i get an error contact company support there isn't a device setup for this account yet contact support to setup a device. Do you happen to kno wthe reason
Check grace periods, and conditional access rulea
@@IntuneTraining Thankyou for the reply i dont have any comditional access setup and the grace period is 7 days still the same issue i a facing Thank you
Is there a way to suppress that
Is there an assumption that federated access has been turned on?
I think that’s called tax evasion not donations 😂