The Ultimate Guide to Managing Apple Devices in Microsoft Intune

How to manage your Apple devices in Microsoft 365 with Intune/Endpoint Manager and Apple Business Manager

#microsoft365 #applebusinessmanager #microsoftintune

🆓 FREE Facebook Group
From security to productivity apps to getting the best value from your Microsoft 365 investment, join our Microsoft 365 Mastery Group

🆓 FREE Microsoft 365 Guide
Our FREE Guide - Discover 5 things in Microsoft 365 that will save your business time and money….. and one feature that increases your Cyber Security by 99.9%

💻 Want to Work Together?

😁 Follow on Socials
TikTok @bearded365guy
Instagram @bearded365guy

📽️ Video Chapters
00:00 Introduction
01:31 Licensing Requirements
01:44 Personal Apple Devices Warning
02:37 Create Apple Push Certificate
05:31 Connect Intune and Apple Business Manager
07:09 Configure VPP Connector
10:01 New or Existing Apple Devices?
10:51 Apple Configurator for iPhone
11:48 Add Existing Device into ABM
14:12 Create Enrollment Profile
18:05 Install Apps via Intune
20:15 Intune Device Functions
21:06 Create Configuration Profiles
23:59 Create Apple Update Policies
26:22 Final Thoughts

[exchameed]

Excellent video.. Also I feel its better to highlight you need company's DUNS for ABM.

[HanSDevX]

Man this is so useful. I have sysadmins that don't know what they are doing and just handing off macbooks like hot potatoes. Thank you for this.

[rr]

Starting an endpoint role in 2 days and your videos were very helpful. You deserve more views.

[ScottMillar]

such a useful video - i went through this about 7 years ago - not much has changed (was using meraki mdm) - great tip on the apple configurator 2 - at the time we had to buy a mac to use configurator - glad its now on ios.

[chuckgrubisic]

Thank you so much, Jonathan. This is incredibly helpful!

[scottlynam]

As an MSP how do you manage multiple clients with Apple business manager. Do you have a tenant for each customer within the apple business manager platform? Or a central apple business manager for all customers?

[jakemacleay]

This is a really, really, really, really, great guide.

[AndrewSaxton-qivf]

Excellent and informative video as always Jonathan, please could you do one on Managing Android Corporate Devices in Microsoft Intune, thank you

[HAL-]

Thank you - this looks to be everything I needed in order to understand the ABM setup HOWEVER.. I have something needing clarification; Does each device user need a MS BP license? cos they ain't cheap!

[TrucNguyen-kuyh]

Hello Jonathan, it is a great training video, thanks a lot!

[WalterRanchinsky]

You are the best. This was extremely helpful and much easier than reading the back and forth of Microsoft and Apple's documentation.

[MicheleBrown-hb]

Apple Configurator doesn't work on anything earlier than iOS 16. Unable to enroll company's old iPad Air 2's. :( I don't have access to a Mac so I assume there is no other work around? I know I can enroll via Company Portal app but doesn't allow me to enroll in "Shared Mode".

[MikeCHT]

You just made my life exponentially easier. Thank you, sir! 🙏

[VIC-]

I’ve had success with Mac OS device management without enrolling in Apple Business Manager. After creating the necessary Apple certificate I just install the Mac version of Company Portal and configure some apps in Intune to be installed or advertised in the Portal. Compliance policies also work and it’s possible to rename and reassign Macs using Intune. The limitation of this is you cannot add or force install Mac App Store apps. But if you can download pkg or dmg files for your apps you can push them to the Macs. Anyway I learned quite a bit about Business Manager and iOS configuration in your video. Thank you.

[guitarocker]

Excellent video, Jonathan. Thank you for sharing your knowledge and showing us these steps.

After you add the iPhone to ABM with the configurator app, "Erase iPhone" displays on the screen. Your video doesn't say what to do with this, you just say to assign the profile and then power the device on. If the device is already on and displaying "Erase iPhone", what step do we need to take to ensure the profile is received by the device? I have been beating my head against the wall multiple times with this step and I cannot get my devices to receive the profile from Intune because they're stuck on the "Erase iPhone" screen.

Thank you for any help you can provide!

[Catonkey]

Is there no way to import a list of serial numbers or IMEI numbers into ABM? We have 150 phones out in the wild, whats the best way to enrol these as company devices?

[AHumanMale]

Thank you for this video. Getting Intune set up for iOS devices has been on my to-do list for a while now, and finding this video motivated me to finally sit down and do it. Currently using JAMF Now for my iOS devices, and while very happy with it, considering a switch over to Intune since it's effectively free with M365 BP, whereas JAMF is now costing $4 per device/month, which adds up to about $3-4K a year for my two tenants.

I will say this though-- based on what I'm seeing so far, pushing configuration profiles and apps to the devices through Intune is SO much more complicated than with the Blueprints JAMF Now uses. But the potential cost savings will make me keep testing this and likely switch if I can get it figured out well enough.

[schism]

I installed the VPP token on AMB but when I get to the enrollment profile I do not have an option to select that VPP. Could you advise?

[Alex-xhly]

Finally one of the best guide to enrol apple devices into Intune. I have been struggling to find a nice and easy guide on how to achieve this and this is by far the best tutorial out there. Any chance you have one tutorial for android devices. Also I have a question in relation to this. What is the point of the managed apple ID for the apple devices if everything is deployed through ABM in Intune, I am struggling to understand the role that managed apple ID plays in all of this.

[meanwhileonearth]

Great video, Jonathan. I get to point where my iPad says "This iPad has been assigned to MDM server" and there is button that says "Erase iPad". I assigned DEP and everything just like you did but nothing happens. Click "Erase iPad" doesn't do anything. Any advice? same happening with my iPhone