How to block Quick Start on Apple devices to prevent restore of unsupervised back up to supervised device

Jeroen Dijkman 1 Reputation point
2021-06-17T09:14:13.567+00:00

We have started using ABM to get our new Apple devices enrolled into Intune as supervised. We noticed that on the Quick Start screen in the initial setup the user gets the option to restore data from their previous Apple device using Bluetooth connection.
In our case these are unsupervised devices and when the user restores the data the new device will basically bypass the complete ABM setup and end up not being supervised and not enrolled into Intune.

According to the Microsoft documentation the Quick start is offered before the ABM profile is downloaded to the device. So ABM can not block this option.

Besides telling the user not to use the quick start option (which we do) is there a way we can either block the quick start option?

regards,

Jeroen Dijkman

Microsoft Security | Intune | Enrollment
Microsoft Security | Intune | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Lu Dai-MSFT 28,496 Reputation points
    2021-06-18T02:01:59.08+00:00

    @Jeroen Dijkman Thanks for posting in our Q&A.

    For this issue, I have done a lot of research. In apple developer documentation, it show some information about this feature:
    allowProximitySetupToNewDevice
    If false, disables the prompt to set up new devices that are nearby. Requires a supervised device. Available in iOS 11 and later.
    Default: true
    https://developer.apple.com/documentation/devicemanagement/restrictions

    So, if the Apple device is managed by intune, we can try to set "Block setting up new nearby devices" to "Yes" in Device restriction profile.
    106803-image.png

    However, if the Apple device is new and not managed by intune, there is no method to make it.

    Hope the above information will help.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.