Hybrid Intune Migration for Apple DEP enabled Devices

[Pratik Dave]

Intune is currently configured in Hybrid mode with SCCM as a mgt authority for all devices. Intune Standalone configuration is in flight for pilot migration. Apple DEP has been integrated with Intune Standalone and Hybrid. However, Devices are not synchronised in standalone Intune, Sync option is disabled.  Enrollment Program Token is listed with warning You must configure these settings in the Configuration Manager console. 

]

Is there any way to force DEP sync prior to breaking Hybrid Intune setup ? Idea is not test new user/device migration before moving on existing users. 

[#2]

Hi,

As Configuration Manager is you MDM Authority you need to trigger the DEP Sync from there, here is an example on how to do just that https://hiway65nblog.blogspot.com/2017/05/trigger-manual-dep-sync-with-powershell.html

Regards,
Jörgen

[#3]

ConfigMgr Sync have no effect on Intune DEP sync !  as a result DEP devices will not be listed in Intune Standalone.

[#4]

Hi,

As you are in Hybrid the DEP sync is initiated from Configuration Manager until you switch MDM authority. It is not a sync with ConfigMgr you are doing you are triggering a DEP Sync in Intune from SCCM as that is your MDM authority.

Regards,
Jörgen

[#5]

thanks for reply, It seems we  cannot sync DEP Devices in Intune standalone until MDM authority have been assigned to Intune.

[#6]

Correct. The tenant level settings are still managed by ConfigMgr until you switch the Authority to Intune.

[#7 · Accepted solution]

Confirmed with MS Support, Microsoft have the design that DEP can only be managed by SCCM if the MDM authority is set as SCCM. MS  consider that if it can be managed by both SCCM and Intune, it will generate some conflicts and mis-operation. However, this is not the case, Apple DEP can have multiple MDM Server can run independently. 

[#8]

Which one will be effective, in term of DEP program like: Intune or VMWare AirWatch..

Also which are more effective like: Costing, Services etc..

[#9]

@Associate_Consultant Intune or Airwatch are MDM solution, Apple Business Managed aka DEP is apple program for enterprises to deploy devices and apps. highly recommended to use Apple Business Manager/DEP not matter what MDM you use i.e. Intune/Airwatch to automatically add to MDM etc.. Read more https://support.apple.com/en-au/guide/apple-business-manager/welcome/web

[#10]

@prtkdvThanks so much for information. If I asked help you about the architect design for the Intune DEP program for 10K iPad devices, then could you help me with the details with design and contents please?

[#11]

@Associate_Consultant please send me private message to discuss further.