Mac Not Compliant on Intune because of DefaultDeviceCompliancePolicy.RequireRemainContact
I'm dealing with a Mac that suddenly went Not Compliant last week based on the compliance policyDefaultDeviceCompliancePolicy.RequireRemainContact. As I understand it, the computer must sync with Intune at least every 30 days, or this policy gets grumpy. Apparently, this hasn't been happening, nor did the usual warning emails get sent out, because well, there isn't a trigger for RequireRemainContact. My Conditional Access policy finally blocked everything, even though the user has been working away on the device for the last 30 days uninterrupted. Oddly, this computer hasn't missed a beat syncing with Defender for Endpoint. It's only on the Intune side that things have gone sour. I have the user exempted from the CA policy now, so he's able to work. That usually fixes the problem on a Windows device, but not so on this Mac. I need to get this resolved, but I'm not sure how? I've tried the usual: syncing from the device, syncing from my portal, rebooting, exempting the device from CA, etc. Nothing's working. I found a similar issue here (Sync your device with Intune issue, mac, not compliant - Microsoft Community Hub), which involved wiping the device and starting over. The box is remote and I'd rather avoid the shipping, if possible. Worse, the user is one of senior devs with a highly specialized installation. A wipe would be really disruptive for him. Hopefully someone knows more about this than I do. Thanks,
Device Enrollment Manager with MAC OS
Hi all, I've just started to test enrolling a MAC OS device using a device enrollment manager. Everything works as expected when following the process - Create device enrollment manager account - On device download and install the company portal on MAC - enroll the device from the company portal app using the DEM account - create intune profiles and dynamic group membership for MAC devices and assign and deploy to MAC One thing I'm not sure about is how to deploy apps to the device. From what I've read these are made available to the user on the device through the company portal app. I also know that they can be deployed using the LOB app deployment process. If the device has been enrolled through the DEM account though, the user does not have access to the company portal with this account. In fact, when you log into the company portal using a different account on the device it seems to want to enrol again? Anyone got any advice on the above. It may be this is by design and when you use a DEM account then you can no longer use the company portal as a user? Thanks Gerry
Enterprise Apps not shown in Intune Company Portal App for MacOS
Hi, we experience that the Intune Company Portal App for Mac did not show any Enterprise Apps . In the Windows Version of the Company Portal App, all Enterprise Apps Assigned to a User are available. Does anyone know if this is normal or do we missed something ? I did not find any documentation regarding this. Thanks best Sven
Mac OS Log Collection
Reviewing the information on Mac OS shell scripting I understand different logs can be collected and reported on. https://docs.microsoft.com/en-us/mem/intune/apps/macos-shell-scripts#collect-device-logs Has anyone been able to pull all logs from the following directories? System Log Folder: /var/log System Log: /var/log/system.log System Application Logs: /Library/Logs
