Newbie with random problems with iOS enrollment and management

%3CLINGO-SUB%20id%3D%22lingo-sub-1888821%22%20slang%3D%22en-US%22%3ENewbie%20with%20random%20problems%20with%20iOS%20enrollment%20and%20management%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1888821%22%20slang%3D%22en-US%22%3E%3CP%3EJust%20starting%20with%20Intune%20coming%20from%20AirWatch.%20%26nbsp%3BSeems%20like%20I%20have%20mostly%20everything%20setup%20correctly%2C%20but%20running%20into%20issues%20here%20and%20there.%20%26nbsp%3BHoping%20someone%20can't%20get%20me%20on%20track%20with%20these.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1)%20school.apple.com%20and%20VPP%20is%20setup%20with%20Intune.%20%26nbsp%3BThe%20device%20is%20in%20school.apple.com%20mdm%20and%20synced%20with%20our%20Intune.%20%26nbsp%3BHave%20an%20enrollment%20token%20setup%20with%20an%20enrollment%20profile%20setup.%20%26nbsp%3BThe%20problems%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ea)%20I%20wipe%20the%20device%20and%20it%20goes%20through%20enrollment%20fine.%20Looks%20like%20configuration%20profiles%20takes%20as%20I%20get%20asked%20for%20only%20a%204%20pin%20passcode.%20%26nbsp%3BBut%20two%20things%20that%20are%20not%20working%20is%20in%20the%20same%20profile%20I%20have%20it%20set%20to%20Auto-Lock%20after%205%20minutes.%20%26nbsp%3BBut%20you%20go%20in%20and%20it%20is%20set%20to%201%20minute.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eb)%20All%20Apple%20Default%20apps%20have%20a%20cloud%20beside%20them%20like%20Facetime%2C%20Reminders%2C%20Notes%2C%20Maps%2C%20Weather%2C%20etc.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ec)%20Noticed%20on%20DEP%20devices%2C%20that%20the%20Configuration%20Profiles%20are%20doubled%20for%20some%20items.%20%26nbsp%3BOne%20is%20installed%20by%20the%20users%20who%20is%20signed%20in%20and%20the%20other%20is%20%22System%20Account%22.%20%26nbsp%3BThe%20passcode%20profile%2C%20wifi%20settings%20profile%20and%20delay%20ios%20updates%20profile%20have%20the%20duplicates.%20I%20am%20using%20All%20Devices%20to%20assign%20and%20wondering%20if%20that%20is%20why.%20%26nbsp%3BTrying%20to%20figured%20out%20Dynamic%20Groups%20to%20group%20devices%20into%20the%20same%20OU%20as%20users.%20%26nbsp%3BLike%20Marketing%20have%20a%20user%20group%20in%20AD%2C%20be%20nice%20to%20have%20a%20devices%20auto%20go%20into%20a%20device%20group%20called%20Marketing.%20%26nbsp%3BLooks%20like%20it%20can%20be%20done%20with%20Categories%2C%20but%20people%20have%20to%20select%20their%20Category%20on%20enrollment.%20%26nbsp%3BWant%20it%20automated%20like%20we%20have%20in%20AirWatch.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20Outlook%20app%20downloaded%20with%20VPP%20and%20it%20is%20forced%20to%20install%20and%20have%20an%20application%20configuration%20profile%20and%20that%20all%20seems%20to%20work.%20%26nbsp%3BJust%20have%20the%20weird%20quirks%20above%20and%20not%20sure%20why%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20playing%20around%20with%20Dynamic%20Device%20Groups%20to%20assign%20things%20that%20way%20to%20Company%20owned%20devices.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EDan%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1888821%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
New Contributor

Just starting with Intune coming from AirWatch.  Seems like I have mostly everything setup correctly, but running into issues here and there.  Hoping someone can't get me on track with these.

 

1) school.apple.com and VPP is setup with Intune.  The device is in school.apple.com mdm and synced with our Intune.  Have an enrollment token setup with an enrollment profile setup.  The problems:

 

a) I wipe the device and it goes through enrollment fine. Looks like configuration profiles takes as I get asked for only a 4 pin passcode.  But two things that are not working is in the same profile I have it set to Auto-Lock after 5 minutes.  But you go in and it is set to 1 minute.

 

b) All Apple Default apps have a cloud beside them like Facetime, Reminders, Notes, Maps, Weather, etc.

 

c) Noticed on DEP devices, that the Configuration Profiles are doubled for some items.  One is installed by the users who is signed in and the other is "System Account".  The passcode profile, wifi settings profile and delay ios updates profile have the duplicates. I am using All Devices to assign and wondering if that is why.  Trying to figured out Dynamic Groups to group devices into the same OU as users.  Like Marketing have a user group in AD, be nice to have a devices auto go into a device group called Marketing.  Looks like it can be done with Categories, but people have to select their Category on enrollment.  Want it automated like we have in AirWatch.

 

I have Outlook app downloaded with VPP and it is forced to install and have an application configuration profile and that all seems to work.  Just have the weird quirks above and not sure why?

 

Also playing around with Dynamic Device Groups to assign things that way to Company owned devices.

 

Thanks,


Dan

0 Replies