APPLE CONFIGURATOR 2 BUSINESS MANAGER UPDATE
APPLE CONFIGURATOR 2 BUSINESS MANAGER SOFTWARE

When they're registered, you can use features available with Azure AD, such as conditional access.

You want devices registered in Azure AD.

You want to prompt users to reset their expired passwords during enrollment.

APPLE CONFIGURATOR 2 BUSINESS MANAGER UPDATE

You want to prompt users to update their expired password when they first sign in.

You want to use multi-factor authentication (MFA).

Using the Company Portal app or Setup Assistant with modern authentication is considered modern authentication. Make this decision before you create the enrollment profile. For more information, see Get an Apple MDM push certificate.ĭecide how users will authenticate on their devices: the Company Portal app, Setup Assistant (legacy), or Setup Assistant with modern authentication. This certificate is required to enroll iOS/iPadOS devices. For more specific information, see Get an Apple ADE token.īe sure the Apple MDM push certificate is added to Intune, and is active. Need access to the Apple Business Manager (ABM) portal, or the Apple School Manager (ASM) portal.īe sure the Apple token (.p7m) is active. For more specific information, see Apple Business Manager enrollment or Apple School Manager enrollment. You use the device enrollment manager (DEM) account. Since these devices are organization-owned, we recommend enrolling in Intune. Or, you can use MAM to manage specifics apps on the device. ❌ To be fully managed by Intune, users must unenroll from the current MDM provider, and then enroll in Intune. ❌ Existing devices should be enrolled using Apple Configurator (in this article).ĭevices are managed by another MDM provider. Applications on BYOD or personal devices can be managed using MAM (opens another Microsoft article), or User and Device enrollment (in this article). Need to enroll a few devices, or a large number of devices (bulk enrollment).ĭevices are associated with a single user.ĭevices are user-less, such as kiosk or dedicated device.

APPLE CONFIGURATOR 2 BUSINESS MANAGER SOFTWARE

✔️ Supervised mode deploys software updates, restricts features, allows and blocks apps, and more.ĭevices are owned by the organization or school.

Apple School Manager enrollment: For more information on Apple School Manager, see Apple education (opens Apple's web site).

You create an enrollment profile in the Intune admin center, and push this profile to the devices.įor more specific information on this enrollment type, see:

These devices are purchased from Apple, have your preconfigured settings, and can be shipped directly to users or schools.

It enrolls a large number of devices, without you ever touching the devices. This option configures settings using Apple Business Manager (ABM) or Apple School Manager (ASM). Use on devices owned by your organization. Previously called Apple Device Enrollment Program (DEP). Automated Device Enrollment (ADE) (supervised) Before you beginįor all Intune-specific prerequisites and configurations needed to prepare your tenant for enrollment, see Enrollment guide: Microsoft Intune enrollment.

So, be sure to add or update existing tips and guidance you've found helpful.

Apple configurator 2 business manager