Bring Mac devices under intune

Question

Hi

We have a requirement to bring Mac OS devices under intune,can you please let me know if the below requirements are possible for Mac via intune
1- Restrict usb storage device
2- Remove local admin rights
3- Application and OS patching
4- custom font deployment
5- macOS patch management
Currently Mac devices are managed by ivanti tool and need to bring under intune. Please let me know the prerequisite and the limitations of intune in managing Mac.

Thank you in advance
Rounak

Answer 1

@Rounak ck Thanks for posting in our Q&A.
There are many functions that intune can achieve, including but not limited to the above. Generally, the configuration profile is used to push the strategy for management. For details, please refer to the official article：
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-macos

The prerequisites are listed as below:
Make sure your device is eligible for Apple device enrollment.
Configure domains
Set the MDM Authority
Create groups
Configure the Company Portal
Assign user licenses in the Microsoft 365 admin center
Get an Apple MDM push certificate

https://learn.microsoft.com/en-us/mem/intune/enrollment/macos-enroll

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.