I'll demonstrate how to set up an Apple Work Profile using Intune in this blog article. Creating an Apple Enterprise Work Profile and activating Apple's work profile in Intune are the first steps in the process. After completing these processes, we accept the deployment of a few Apple programs from the App Store to the Work profile. Apple device management is possible with Microsoft Intune using a variety of options. In this blog, I'll walk you through the process of configuring Intune and utilizing Apple Configurator to enable Apple.
Describe the Apple Configurator
In your company or school, Apple Configurator makes it simple to install iPad, iPhone, iPod touch, and Apple TV devices.
Use Apple Configurator to swiftly set up several USB-connected devices with the settings, programs, and information you select for your students, staff, or clients.
You may quickly and simply configure one or hundreds of devices with the help of Apple Configurator thanks to its adaptable, device-centric architecture. Simply choose one or more devices, then do anything with them. You can update software, install applications and configuration profiles, rename and change the background on devices, export device data and documents, and do a lot more using Apple Configurator. Any device may be examined to view information including its console log, hardware addresses, installed applications and profiles, and serial number.
The following prerequisites must be met for the steps to work.
A device running iOS 14.0 or later; • A Microsoft EMS license (E3 or E5); and • An Azure tenant.
Download the Company Portal from the App Store.
Keep a Wi-Fi connection active until all procedures are finished.
Your device must have the Safari web browser.
Access to iOS/iPadOS devices physically
Device serial numbers (for setup assistant enrollment only), an Apple MDM push certificate, USB connection cords, and a macOS machine running Apple Configurator 2.0
Create a device profile in Apple Configurator
The variables used during enrollment are specified by a device enrolment profile. These changes only take effect once. Create an enrollment profile by following these instructions to enroll iOS/iPadOS devices in Apple Configurator.
Select Devices > iOS/iPadOS > iOS/iPadOS enrolment > Apple Configurator in the Microsoft Endpoint Manager admin center.
Select Create > Profiles.
Type a Name and Description for the profile for administrative reasons under Create Enrolment Profile on the Basics page. These facts are hidden from users. To create a dynamic group in Azure Active Directory, utilize the Name field. To assign devices with this enrolment profile, specify the enrollmentProfileName option using the profile name. Learn more about the dynamic groups in Azure Active Directory.
To see the Settings page, click Next.
Select whether devices with this profile must enroll with or without a designated user under User Affinity.
Enroll with user affinity - Select this option if you wish to utilize the corporate portal for services like installing applications on devices that belong to users.
Enroll without User Affinity – Select this option for devices that are not linked to a specific user. Use this for gadgets that operate without requiring access to local user data.
Select the Company Portal under "Select where users must authenticate."
Select Next
To save the profile, click Create
Enrollment in Setup Assistant
Device serial numbers must be added to Intune before we may begin enrolling devices.
Make a two-column, headerless, comma-separated value (.csv) list.
The serial number should go in the left column, and the information should be on the right. The list may currently have a maximum of 5,000 rows.
This is how the.csv list appears in a text editor: F7TLWCLBX196, device information
Device information: DLXQPCWVGHMJ
Select Devices > iOS/iPadOS > iOS/iPadOS enrolment > Apple Configurator > Devices > Add from the Microsoft Endpoint Manager admin center.
To apply an enrollment profile to the serial numbers you are importing, choose one. Select Overwrite information for existing identifiers if you want the new serial number details to replace all previous ones.
Browse to the CSV file containing the serial numbers, then click Add under Import Devices.
Publish the profile
Once the profile has been built, it must be exported from Intune as a URL and loaded into Apple Configurator.
Select Devices > iOS/iPadOS > iOS/iPadOS enrolment > Apple Configurator > Profiles > Select the profile you want to export from the Microsoft Endpoint Manager admin center.
Select Export Profile from the profile.
Get the Profile URL.
Then, you may specify the Intune profile used by iOS/iPadOS devices by adding it to Apple Configurator.
To see the Settings page, click Next.
Select whether devices with this profile must enroll with or without a designated user under User Affinity.
Enroll with user affinity - Select this option if you wish to utilize the corporate portal for services like installing applications on devices that belong to users.
enroll without User Affinity – Select this option for devices that are not linked to a specific user. Use this for gadgets that operate without requiring access to local user data.
Select the Company Portal under "Select where users must authenticate."
Select Next
To save the profile, click Create.
