You'll need to transfer the enrollment profile to the Mac directly, which requires a USB connection to a Mac computer running Apple Configurator. Direct enrollment doesn't wipe the device so it's ideal to use when devices don't need access to local user data. Set up an enrollment experience for corporate-owned devices that are unaffiliated with a single user, like devices used in a shared space or retail setting. Set up direct enrollment for corporate devices This method is ideal for organizations that have a large number of devices to enroll, because it eliminates the need to touch and configure each device individually. Set up an out-of-the-box enrollment experience that automates enrollment on corporate-owned devices purchased through Apple School Manager or Apple Business Manager. Set up Apple Automated Device Enrollment (ADE) BYOD lets people use their personal devices for work-related things. This enrollment method is for organizations that have Bring Your Own Device (BYOD) policies. You'll also find enrollment resources and links to share with device users so that they're supported throughout the enrollment experience. Set up enrollment for user-owned (BYOD) devicesĬomplete the prerequisites in this article to enable enrollment for user-owned devices. For information about each enrollment method and how to choose one that's right for your organization, see the macOS device enrollment guide for Microsoft Intune.

Intune supports Bring Your Own Device (BYOD) enrollment, Apple Automated Device Enrollment, and direct enrollment for corporate devices. This step ensures that devices receive Intune policies and configurations after they enroll. Enroll devicesĬonfigure the enrollment methods and experience for company-owned and personal macOS devices. For example, because the Company Portal app for macOS isn't available in the App Store, we recommend having a communication plan so that end users know how to install Company Portal and enroll their devices. It will also help you plan for rollout, communication, support, testing, and validation. Use the Microsoft Intune planning guide to define your device management goals, use-case scenarios, and requirements. Set up Apple MDM push (APNs) certificateįor more detailed information about how to do the initial setup, onboard, or move to Microsoft Intune, see the Intune setup deployment guide.Have Global Administrator or Intune administrator Azure Active Directory permissions.PrerequisitesĬomplete the following prerequisites to enable macOS device management in Intune: This article guides you through macOS-specific tasks to help you enable Intune mobile device management for macOS, configure policies, and deploy apps. Secure access to work email, data, and apps on macOS devices.

Endpoint security for mac