Intune Implementation

Question

The Intune I know 4 or 5 years has changed.
Last time, I just need to define device profile and compliance policies for the various devices and assign to the groups of users.
Ensure the users are licensed.
On the mobile device, install the Intune company portal app, the users sign in to their O365 accounts and that is it.

Now I am trying to deploy to a test tenant.

There is Apple Push Notification certificate so I have to request for CSR.
Then settings are all changed. And now there are enrollment types like Apple Business Manager.

I have tried to search on the Internet. For a new deployment, say for iOS, what are the minimum steps I have to do?

Apply APN
Configure iOS Device Restriction profile and assign to test group
Configure iOS compliance policy and assign to test group
With mobile device I just install Intune app and sign in to the account in the group

Or I have to configure Apple Business Manager too?

Answer 1

@Lim Chong Sun Thanks for posting in our Q&A.

For this issue, my answer is NO. Whether we need to configure Apple Business Manager, it depends on which enrollment method we choose. Here is the iOS enrollment method:
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment#iosipados-enrollment-methods

If we choose ADE enrollment, it is needed to configure Apple Business Manager or Apple School Manager. We can read the following article as a reference.
https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios

Generally, for iOS, it is suggested to use BYOD enrollment and we don't need to configure Apple Business Manager. For BYOD enrollment, here are some steps:

1. Get an Apple MDM push certificate. We can refer to the steps in the following article:
   https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get#steps-to-get-your-certificate
2. Enroll your iOS device to intune. We can watch the video in the following link:
   https://learn.microsoft.com/en-us/mem/intune/user-help/enroll-your-device-in-intune-ios

Hope the above information will help.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.