This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 42%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAA%3C/text%3E%3C/svg%3E)
Hi there,
I am trying to test macOS deployment via Intune. I added a test device to Intune and assigned myself as a user for some compliance and configuration policies.
At the deployment phase, I signed in using the Microsoft account and now I am receiving the Remote Management screen that says: "Waiting for management server" and "Connecting to server i.manage.microsoft.com"
No progress is made.
Does anyone know what I might be missing that has resulted in the above situation?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@Anam Ahmed, Thanks for posting in Q&A. From your description it seems you are enrolling in MacOS device into Intune, but it stuck on Remote Management screen. If there's any misunderstanding, feel free to let us know.
To do MacOS enrollment, please firstly check if the MDM push certificate from Apple.is configured in Intune portal which can let Apple allow Intune to manage apple devices.
https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get
To enroll macOS devices in Microsoft Intune, there are following options:
BYOD: Device enrollment
Automated device enrollment (ADE)
Direct enrollment
https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-macos
Please let us know which option we use and if we have followed the document to configure and do the enrollment.
In addition, please ensure the enrolled user has Microsoft Intune license assigned.
Please check the above information and if there's any update, feel free to let us know.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Crystal-MSFT Thanks for getting back to me.
I can confirm that the Apple MDM Push Certificate is active.
I am using ADE, and created a profile and assigned it to the test device for enrolment (with user affinity)
I have Intune license assigned to myself via M365 Business Premium.
I have not added macOS Company Portal app though. Let me add that and see how it goes.
I am reading the steps again: "When users enter their Microsoft Entra credentials, the enrollment starts.
For me, I signed in using the Microsoft account, and then I see a message regarding enrolment profile being installed, but after that nothing happens, I can not use the device or see any apps or policies being pushed.
Let me know if you can assist in any way.
@Anam Ahmed, Thanks for the reply. For new wipe devices and existing devices, they enroll with different methods. Please confirm if the steps we are followed.
For macOS enrollment profile with user affinity, sign in to the Company Portal app to complete Microsoft Entra registration and conditional access requirements, and finish enrollment. Could you confirm if the process is finished? Can we see the device in Intune portal?
@Crystal-MSFT Thanks once again for the persistence and guidance. I have assigned the enrolment profile to the test device. I completed the Entra ID registration by signing in, but then it just waited for the management server. Attaching a screenshot for reference.
I can see the device in Intune under macOS devices and see my username with it, but the OS and Compliance fields are either blank or say 'not evaluated'
@Anam Ahmed, Thanks for the reply. From the picture you provide, I notice the device is stuck at waiting for management server.
Could you confirm if the network requirements are allowed in our environment?
Meanwhile, please also confirm the Enrollment program token is not expired.
In addition, could you let us know if the issue is with one macOS device or all the macOS device?
@Crystal-MSFT You are wonderful, I was testing on an old device, I got it working on a newer macOS device. Many thanks for all the help and guidance. I am excited to walk down the next steps and configure the policies, apps and updates.
I can work on new devices then. I just have a quick elaboration on the next steps; for existing devices with another MDM, what should be the process such that the process is as seamless as possible? Would just editing the MDM server in Apple Business Manager and having the user enrol into Intune work? Should I prepare for any user data backup?
Any guidance is much appreciated.
@Anam Ahmed, Thanks for the reply. I am glad we can find the next step.
From your description, I know the device is enrolled into another MDM. Based as I know, users must unenroll their devices from the current MDM provider before they enroll in Intune.
And to avoid data lose, please do data backup. After the device unenrolled from another MDM, you can create the MDM server for Intune in Apple Business Manager and assign it to the device and then follow the ADE enrollment method in the official article to do ADE enrollment. On device side to avoid any information of the previous MDM existing, we can choose to reset the device to continue the enrolment steps on the device.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 20%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDG%3C/text%3E%3C/svg%3E)
HI Crystal,
I have the same issue as Anam. From reading above I suspect it is to do with the version of MacOS that came with the device. Can you advise on how I can enroll these older versions?
Thanks,
Dean
@Dean Greer, Currently, Intune support macOS version is 12.0 and later. If you are older than this version, I am afraid Intune can't manage it. We suggest updating to the latest version.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers#apple
@Crystal-MSFT Sorry for the delay in responding. I appreciate your valuable advice.
I am asked to create a local account with a username and password during the enrolment process. I tried setting the following as "no" but it would still prompt for one:
Is there a way to not create a local account? I am asking because we do not want the users to sign in using a local account. It would be ideal to have them sign in using Identity Access Management (Okta) or even their Company Portal/Microsoft accounts.
Let me know if you can provide some guidance here.
@Anam Ahmed, Thanks for the reply. Based on my experience, no matter which enrollment macOS is used, local account is always needed to be set.
For the configure value no, based on my understanding, it seems to be "skip all account setting configurations". But as the local account is needed. You will be prompted to manual set it. The value yes means to configure local primary account settings for targeted Macs in the enrollment profile.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-macos