Apple enrollment - Enrollment type profiles

Question

Hi,

Today when a user is hired they buy a new iphone themself at the regular store, and download the company portal and sign in with their work email, then apps and policies are pushed to this device.
I have looked at enrollment type profiles but do not see the complete picture here. If I configure "Device enrollment" will then the device be marked as "Ownership=Corporate" ? And If I create "User enrollment" will then the device be marked as "Ownership=Personal" ?

I know today the devices come in as "Personal" and I thought I changed them to "Corporate" but it seems like they have changed back ? hmmm....

If I do not configure enrollment type profile I was not asked during the enrollment if its a personal or corporate device, I thought I was going to be asked for that ?

Is the only main difference between Personal and Corporate that we can see manged apps ? Because today I can see managed apps on the iphones that are marked personal....

Thanks for reply

/R
Andy

Answer 1

You have to use Apple Business manager or Apple Configurator with Intune to enroll. This way the Devices are treated corporate.
https://learn.microsoft.com/en-us/mem/intune/enrollment/ios-enroll

Other way is to add serial number manually.
https://learn.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add

The difference with corporate device is as you said inventory for apps and other things it can do is full phone numbers and if you use Apple Business manager, you also get device into "Supervised" state, which gives you deeper control of the device.

Answer 2

@andreas bright Thanks for posting in our Q&A.

For this issue, I agree with PaD.

I will add a few information about iOS Enrollment. For iOS enrollment, we can see iOS “User Enrollment” mode as the BYOD mode, so it is marked as "personal". If we do not configure enrollment type profile, it is also BYOD. If we choose "Determine based on user choice", we will be given choice of which enrollment type to use.

Thanks for understanding.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Hi,

Thanks for answers @Lu Dai-MSFT @Pa_D

Correct me if I am wrong,

1. We do not configure enrollment profile = Devices are enrolled as personal (I can switch it manually to corporate, but after a while it automatically switch back?)
2. We do configure enrollment profile and set this to Device = Devices are registered as Corporate ?

Thanks

/R
Andy