Event details
Currently when using LAPS for macOS in Intune, we can only apply local account configuration during the ADE process as per the Intune documentation. Could someone from the team confirm if this is an Apple limitation, or a Microsoft limitation? This is a snag with the new Apple MDM Migration process in ABM, as migrating devices to Intune do not count as a "new enrollment through ADE"
JaminAlmondMicrosoft
Good day tkatzman
The only time Apple’s MDM framework exposes the API for local account creation is during Setup Assistant as part of Automated Device Enrollment (ADE). After enrollment is complete, macOS does not provide APIs for creating or managing local accounts via MDM.