VPP Licensing Issues
Hi there, i'm currently getting frustrated on the following problem: At first the outline: We want users to choose: Do you want to use a personal device? If so you can enroll in MDM with type "User Enrollment". If the user "qualifies" to receive a corporate iOS device, we're using Automated Device Enrollment via ABM No on to the issue: App Assignment for the App MS Teams Required: All devices, with an include filter (All ADE Devices), Device based licensing Idea: this should only happen when using corporate devices Available: All Users, with an exclude filter (All ADE devices), User based licensing Idea: All devices which are not corporate should apply this one. App Assignment for the App MS Whiteboard No Required Assignment Available: All Users, with an exclude filter (All ADE devices), User based licensing Idea: All devices which are not corporate should apply this one. Azure AD Security Group with all Users using corporate ios devices, Device based licensing Idea: All devices which ARE corporate should apply this one. What is the result? The Whiteboard App is working perfectly: When using an ADE device, the device bases license is used. (therefore a silent installation happens, after the user choose "Install app" from Company Portal.) When using an User Enrolled device, the user based license is used. Great! As soon as an App has additionally a required assignment, the whole thing brokes up: When the user on the user enrolled devices tries to install the app from company portal, nothing happens. Intune shows the total misleading error: "Device VPP licensing is only applicable for iOS 9.0+ devices. (0x87D13B69)" The device is way above 9.0 AND the device shouldn't use device licensing. (Of course User Enrollment doesn't support device licensing) I'm totally aware of the fact, that we have to use "user based licensing" for User Enrolled devices AND we have to use Device Based licensing when using ADE and want to install silently or the user don´'t has an apple-id. How can we achive this scenario? We totally don't want to have to choose between either ADE or User Enrollment. Any help, as always is highly appreciated. 🙂 Cheers, Patrick!
Intune licenses for Bulk Enrollment Method
Hi All, I'm looking for the proper licensing for Intune when enrolling PCs via a provisioning package. Since this does not tie a device to a specific user, I'm wondering if I just need to purchase Intune Device licenses for each PC? https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enrollment-methods#administrator-based-enrollment-in-intuneSurface Hub managed by Intune & Licensing via EMS
We have a few Surface Hubs in our organization which I'd like to add to intune. Obviously these devices should not be associated with a specific user, so I started looking into the Device Enrollment Manager (DEM) feature as a way to join the devices w/o tying them to a user. Reading the doc on DEM (https://docs.microsoft.com/en-us/intune-classic/deploy-use/enroll-corporate-owned-devices-with-the-device-enrollment-manager-in-microsoft-intune) leaves me with the impression that each device enrolled using a DEM requires it's own intune license. We get intune as part of EMS, which is licensed per user, not per device. Do we need to buy additional per-device intune licenses for each surface hub? Or, am I on the wrong trackaltogether? Is there a better way to enroll the Hubs in intune w/o a user association?
