2024E15 - Apple iOS Personal Device Enrollment (I.T)
HTML-код
- Опубликовано: 22 авг 2024
- Visit our websites and social media for more or to get in touch with us
Steve Hosking - Microsoft MMD Team
/ onpremcloudguy
github.com/onp...
Adam Gross - Microsoft MVP - Enterprise Mobility
/ adamgrosstx
www.asquaredoz...
github.com/Ada...
mvp.microsoft....
Ben Reader - Microsoft MVP - Enterprise Mobility
/ powers_hell
www.powers-hel...
github.com/tab...
mvp.microsoft....
Jóhannes Geir Kristjansson - Microsoft MVP - Enterprise Mobility
/ jgkps
/ j%c3%b3hannes-geir-kri...
mvp.microsoft....
I love that you guys don't cut out those parts where you face issues. Showing the whole thought process and what you do to fix it. It feels natural compared to other videos that just works perfectly (which we know is not something Intune does lol)
Thanks for this series. Big fan.
Great tutorial, as ever! It would be great if you could shed some light on User enrollment and Device enrollment options available in iOS enrollment.
my understanding is that user enrolment is for BYOD and does not allow things like wiping the device which is really important. Device enrolment is for corporate devices but ABM gives you a much better experience. In my opinion they need to improve iOS enrolment - Android has a far easier to manage ecosystem for both BYOD and corp owned devices
Intune will end support for user enrollment with Company Portal shortly after the release of iOS/iPadOS 18, because Apple will no longer support profile-based Apple User Enrollment. From what I understand the Account driven user enrollment: Also referred to as account-based enrollment is the new way to enroll BYOD iOS devices.
Great format, guys. Keep them coming.
12:09 “The administrator may collect personal data”
However, that disclaimer should probably be highlight.
I was going to install this on my personal device, but the disclaimer is all I need to know. I’ll como to carry two devices. 🤷♂️
Anyone disagree? Explain. I know both about IT (hence me searching the web on this). I’m ignorant as to how that disclaimer shouldn’t steer anyone away.
Loving the videos guys! I'm sure you're about to do some followups on Android and maybe other mobile devices, but one topic I'd love to see covered is managing shared devices. In particular, I find intune licensing with shared devices a bit perplexing. Will every user need an Intune license? Can I assign the license to a device group?
I want to manage some computers hooked up to a pay-to-print system, I want to manage devices used by multiple part-time employees, and I want to manage devices intended as loaners to guests and unfortunate staff. The questions sprouting in my mind makes me feel this has some real meat to its bones. Even as I find my own solutions, I would love to see your breakdown!
This is a great video. I have a question I am hoping someone here can help answer. To perform user device enrollment in this same scenario, do this require you to federate ABM with Azure?
Gents i’m sure on personal devides a wipe shoud be remove corporate data only as its within a bubble? I.e. corporate data is store seperately and when wiped it should only wipe that data? Thanks for the video!
It deffo doesn't. And 1 of the big reasons no personal device should EVER be enrolled into an MDM solution.
10:24 how is the user that never enrolled going to enter the MFA code and where; if that person is only using single device?
How would approve this enrollment?
What about web-base device enrollment with JIT?
Hi guys, I work for an organisation with multiple sites on a shared tenancy. Can you only have 1 instance of the Apple push certificate per tenancy or can you have multiple. Do you also know whether you can connect multiple Apple Business/School Manager setups to 1 tenancy?
Last I heard you can have multiple, and you can use scope tags to target access as needed
Good to know, thanks for the response
Should never be enrolling personal devices of any OS type. Ever.
Straight block with no exceptons. With all the MAM components that are available today (and constantly being added to), I'm still to see a valid business requirement for enrolling a personal device in the 8 years I've been using Intune.
Some companies don't want to go through managing Business device fully as supervised devices registered in ABM. Or aren't able to get devices registered in ABM. They can be enrolled as personal but managed as corporate.
But overall, yes, adding personal devices makes management very difficult.
Curious, can you push or require a specific app be installed on the device if it is not enrolled?
What about pushing apps to devices?
Why would you want to be pushing apps to a personal phone? Jesus that's horrendous architectural process
@@TheMowgus Nope. And neither should you ever want or have a need to. Management and administrative nightmare