Automated device enrollment
2 TopicsVPP Licensing Issues
Hi there, i'm currently getting frustrated on the following problem: At first the outline: We want users to choose: Do you want to use a personal device? If so you can enroll in MDM with type "User Enrollment". If the user "qualifies" to receive a corporate iOS device, we're using Automated Device Enrollment via ABM No on to the issue: App Assignment for the App MS Teams Required: All devices, with an include filter (All ADE Devices), Device based licensing Idea: this should only happen when using corporate devices Available: All Users, with an exclude filter (All ADE devices), User based licensing Idea: All devices which are not corporate should apply this one. App Assignment for the App MS Whiteboard No Required Assignment Available: All Users, with an exclude filter (All ADE devices), User based licensing Idea: All devices which are not corporate should apply this one. Azure AD Security Group with all Users using corporate ios devices, Device based licensing Idea: All devices which ARE corporate should apply this one. What is the result? The Whiteboard App is working perfectly: When using an ADE device, the device bases license is used. (therefore a silent installation happens, after the user choose "Install app" from Company Portal.) When using an User Enrolled device, the user based license is used. Great! As soon as an App has additionally a required assignment, the whole thing brokes up: When the user on the user enrolled devices tries to install the app from company portal, nothing happens. Intune shows the total misleading error: "Device VPP licensing is only applicable for iOS 9.0+ devices. (0x87D13B69)" The device is way above 9.0 AND the device shouldn't use device licensing. (Of course User Enrollment doesn't support device licensing) I'm totally aware of the fact, that we have to use "user based licensing" for User Enrolled devices AND we have to use Device Based licensing when using ADE and want to install silently or the user don´'t has an apple-id. How can we achive this scenario? We totally don't want to have to choose between either ADE or User Enrollment. Any help, as always is highly appreciated. 🙂 Cheers, Patrick!Solved16KViews1like21Comments
Failed to create MacOS Enrollment Profile
Hello hoping someone out there might have encountered this or have some advice.. I am trying out Intune in combination with Apple Business Manager (ABM). I followed the guides on setting up ABM with our Azure AD and Intune environments, created the required MDM Push Certificates, VPP tokens, etc. I was able to setup the Intune MDM successfully in Intune and ABM, and created an iOS device enrollment profile in Intune which worked well and was able to automatically enroll an iPhone and successfully deploy the company portal app and other apps to it. The issue I'm having is when I go to create the MacOS device Enrollment profile in Intune I select the existing MDM program token and go thru the process but it fails to create the MacOS enrollment profile and instead I get an error "Failed to create <profile name here>". I've tried various settings with the enrollment profile, I even created a new apple enrollment token and tried to setup the MacOS profile with the new token but I get the same error. I followed the article https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-macos and don't see any missing steps... I've got the company portal app configured with the PKG as a LOB but it won't even get that far since there isn't an enrollment profile to automatically enroll the MacOS device into Intune. The device however is getting sync'd from ABM and is visible under the Apple enrollment token's device list. Granted I could manually install the Company Portal to enroll the mac with Intune but I am trying to automate this process as best as I can and use the enrollment profile to do so. Any advice or direction you might suggest? From what I can tell everything seems setup correctly... and iOS/Windows devices are working fine its just MacOS I'm stuck on. Thank you in advance.Solved6KViews1like16Comments
