Forum Discussion
Solved
Remove iOS device from assigned enrollment profile
Dear forum members,
We all know we could assign a supervised device with a enrollment profile.
- In the Microsoft Endpoint Manager admin center, choose Devices > iOS > iOS enrollment > Enrollment Program Tokens > choose a token in the list.
- Choose Devices > choose devices in the list > Assign profile.
- Under Assign profile, choose a profile for the devices > Assign
But how do you remove the device from a certain profile? When you select the device, you option is to choose which enrollment profile you want to assign to, but you can't choose blank. You have to choose a profile for the device.
What I have been doing is delete the device from Intune and run the sync between ABM and Intune again to bring it back. This is obviously not ideal and probably not the right way to do.
Can anyone please advise?
Thank you!
nhtkid This is by design. Devices synced from Apple Business Manager must have an enrollment profile assigned in Intune to enable functional automated enrollment. If you do not want an enrollment profile assigned, then the device should have the MDM profile assignment removed from Apple Business Manager and not be assigned to your Intune tenant in the first place. Is there a reason why you are configuring the device for automated enrollment, then trying to disable it in Intune?
6 Replies
nhtkid This is by design. Devices synced from Apple Business Manager must have an enrollment profile assigned in Intune to enable functional automated enrollment. If you do not want an enrollment profile assigned, then the device should have the MDM profile assignment removed from Apple Business Manager and not be assigned to your Intune tenant in the first place. Is there a reason why you are configuring the device for automated enrollment, then trying to disable it in Intune?
Thanks eglockling, I think I was a bit confused myself. The question I asked didn't make much sense either lol.
I am now quite cleared that for iPads that are in the Apple's Device Enrollment Program, either in ABM or ASM, they will be synced to Intune as Automatic Device Enrollment. I need to have one ADE enrollment profiles for each device enrollment and user enrollment.
What I am still not clear about, is the Enrollment targeting - Enrollment types (preview). What kind of enrollment profile that is for if I create one under that node?
Cheers,
nhtkid Enrollment targeting is for configuring the user experience for non-automated device enrollment. You can choose between the standard Device Enrollment, or the new User Enrollment that was introduced by Apple with iOS/iPadOS 13 (similar to Android Enterprise Work Profile). This will be applicable to iOS/iPadOS devices that are not part of Apple ADE and do not have an MDM profile assigned in Apple Business Manager. Hope this helps.
