VPP Licensing Issues
Hi there, i'm currently getting frustrated on the following problem: At first the outline: We want users to choose: Do you want to use a personal device? If so you can enroll in MDM with type "User Enrollment". If the user "qualifies" to receive a corporate iOS device, we're using Automated Device Enrollment via ABM No on to the issue: App Assignment for the App MS Teams Required: All devices, with an include filter (All ADE Devices), Device based licensing Idea: this should only happen when using corporate devices Available: All Users, with an exclude filter (All ADE devices), User based licensing Idea: All devices which are not corporate should apply this one. App Assignment for the App MS Whiteboard No Required Assignment Available: All Users, with an exclude filter (All ADE devices), User based licensing Idea: All devices which are not corporate should apply this one. Azure AD Security Group with all Users using corporate ios devices, Device based licensing Idea: All devices which ARE corporate should apply this one. What is the result? The Whiteboard App is working perfectly: When using an ADE device, the device bases license is used. (therefore a silent installation happens, after the user choose "Install app" from Company Portal.) When using an User Enrolled device, the user based license is used. Great! As soon as an App has additionally a required assignment, the whole thing brokes up: When the user on the user enrolled devices tries to install the app from company portal, nothing happens. Intune shows the total misleading error: "Device VPP licensing is only applicable for iOS 9.0+ devices. (0x87D13B69)" The device is way above 9.0 AND the device shouldn't use device licensing. (Of course User Enrollment doesn't support device licensing) I'm totally aware of the fact, that we have to use "user based licensing" for User Enrolled devices AND we have to use Device Based licensing when using ADE and want to install silently or the user don´'t has an apple-id. How can we achive this scenario? We totally don't want to have to choose between either ADE or User Enrollment. Any help, as always is highly appreciated. 🙂 Cheers, Patrick!
apple vpp token status assigned to external mdm
I have been using Intune for years with no other MDM provider in the mix. Today, out of nowhere I notice that my VPP token says "apple vpp token status assigned to external mdm". The ONLY recent thing that I have done is set some applications to NOT update automatically. I know that simply grabbing back control is the easiest, but curious if anyone else has seen this recently. Thanks, Justin
macOS VPP apps fail to deploy, "License not eligible for device assignment" (Monterey)
Hello, Our macOS VPP apps sometimes fail to deploy, when using Intune/Microsoft Endpoint manager for app deployment. Symptoms: - All deployed VPP apps missing from computer - VPP apps may be deploying fine for another computer, running the same or different os version - Running sync for problem computer may or may not trigger app install from the App Store - From macOS console log, triggering sync provides some interesting errors (Pages app installation): error 15:51:41.985744+0200 appstored AMSURLSession: [___/com.apple.iWork.Pages:___] Protocol completed with error. Error Domain=AMSErrorDomain Code=305 "Server Error" UserInfo={NSLocalizedFailureReason=License not eligible for device assignment., AMSServerAllowed=false, AMSServerErrorCode=9628, AMSServerPayload={ "cancel-purchase-batch" = 1; customerMessage = "License not eligible for device assignment."; failureType = 9628; "m-allowed" = 0; pings = ( ); }, NSLocalizedDescription=Server Error} - App deployment seems to fail before InstallApplication command - App licence is verified to be valid for device assignment - After a lenghty amount of time, VPP apps may or may not eventually install on the problem computer - Re-installing the OS and Intune MDM Agent makes no difference - Intune MDM Agent is working fine, other applications (.intunemac) and policies are being applied to the computer I'm not sure if this is a Intune problem or a macOS/Apple problem, so I will cross post this and provide links below. https://www.reddit.com/r/Intune/comments/skatzu/macos_vpp_apps_fail_to_deploy_license_not/ https://discussions.apple.com/thread/253636604 https://techcommunity.microsoft.com/t5/microsoft-intune/macos-vpp-apps-fail-to-deploy-quot-license-not-eligible-for/m-p/3116114 Has anyone ran into this problem?
Mixing VPP Licensing
Hello! Wanted to ask for some ideas/suggestions on a following situation. We have started to enroll our iOS devices as fully managed through ABM into Intune. Overall things work great and we managed to deploy everything needed. Apps are device licensed and pushed through Company Portal. However we are currently looking into allowing work profile for a group of users and this we are doing via user enrollment with user selecting personal device. The issue we are running into is mixing license types for the same app. For example: User A will use a fully managed device with all apps available + work profile allowing for a small subset of apps. As per our understanding fully managed devices require device based app licensing while apps deployed through user enrolled devices have user based licensing. The problem is that in intune it is not possible to assign the same user (group) with two types of licensing for the same app, namely device for fully managed and user for work profile scenario. We have also tried with multiple groups, fiddled with required vs. available (with all limitations), and also tried with filters depending on ownership type. None of it did the trick. Did maybe someone have something similar? Any feedback is more than welcome! Thank you very much!
Issue with VPP apps automatic updates.
Dear Colleagues, We have enabled user based License for VPP Apps and enabled auto update option in Apple VPP token. As per the MS Document User based license will take local App store settings configuration. That cannot be managed by the Intune admin. But Now also VPP applications are getting updated automatically over Mobile Data even when the user licensing has been set in the assignment and Mobile Data is disabled in Automatic Downloads within the device settings. Below article was followed. How to manage iOS and macOS apps purchased through Apple Volume Purchase Program with Microsoft Intune: https://docs.microsoft.com/en-us/mem/intune/apps/vpp-apps-ios. So suggest how to stop autoupdates happening through mobile data.iOS 14 Beta Version testing in Intune
Hello Everyone, Hope Everyone doing good ! In this conversion our Goal is discuss and clarity about recently Apple has released iOS 14 beta versions . For our environment we have made some testing by updating iOS 14 beta, Below is the one of issue we come across. * Not able to enroll iPad(OS getting detected as “MacOS” during enrollment). If someone able to find out cause means please help to resolve it and share if there is any other issue by anyone else to get aware of that also.Issue with VPP apps automatic updates
Dear Colleagues, We have enabled user based License for VPP Apps and enabled auto update option in Apple VPP token. As per the MS Document User based license will take local App store settings configuration. That cannot be managed by the Intune admin. But Now also VPP applications are getting updated automatically over Mobile Data even when the user licensing has been set in the assignment and Mobile Data is disabled in Automatic Downloads within the device settings. Below article was followed. How to manage iOS and macOS apps purchased through Apple Volume Purchase Program with Microsoft Intune: https://docs.microsoft.com/en-us/mem/intune/apps/vpp-apps-ios. So suggest how to stop autoupdates happening through mobile data.VPP license assignment - first VPP popup several times
Hi folks, i've experienced a problem while using iOS BYOD devices with user driven user enrollment method. If the user never used the managed apple-id before, he's going to be prompted to acknowlegde the popup to agree that the company is assigning apps via VPP. Because of the assignment of a few more apps (targeted "required"), the user will be annoyed with 5, 6 or 7 popups, which are coming up faster, than the user can click (and read 😉 the terms). Do you guys have any idea on how to deal with that? Of course i could target all the apps as available an not required, but i think that is not ideal.How to update managed Apps for iOS device
Dear forum members, Our VPP token is configured to turn off the Auto-update in the Intune for managed Apps. So how do you push out an app update if there is one? In the Airwatch, you could just select the App and it will show you all the devices that have the managed app installed, with the app version for each device. If you want to update the App, just select the devices and click update the App. I don't seem to have the equivalent settings in Intune. Thanks.
