The corporate-owned devices purchased through Apple Business Manager or Apple School Manager can be enrolled in Microsoft Intune via Apple automated device enrollment. An ADE enrollment profile is required to enroll the device. A device enrollment profile defines the settings applied to a group of devices during enrollment. This article will demonstrate how to create an Apple ADE profile. This article assumes you already have ADE prerequisites configured in your Intune tenants. The prerequisites include: Apple Automated Device Enrollment Token configured and active Apple MDM Push Notification ..read more

Microsoft Intune has built-in policies that can manage software updates on iOS/iPadOS supervised devices. It’s recommended to use these policies to manage software updates through Intune and not leave the responsibility to install software updates to the end users. Leaving iOS update responsibility to the end user may lead to different issues. Users can apply iOS updates that your organization has not approved. This may break applications if they are not compatible with the latest iOS version. Users may also opt to simply avoid applying the required updates leaving the device vulnerable to sec ..read more

Microsoft Intune includes some built-in settings to configure different Apple features on iOS/iPadOS devices. One of such setting is to show or hide built-in (native) apps. You can configure the policy for visible or hidden apps through Intune device restriction profiles. This feature applies to below iOS/iPadOS versions. iOS 9.3 and newer iPadOS 13.0 and newer These settings are available for Automated Device Enrollment (Supervised) devices. How to Show or Hide Built-In iOS Apps Follow the below steps to create an Intune device restrictions profile to show or hide iOS native apps. App ..read more

Microsoft Intune includes some built-in settings to configure different Apple features on iOS/iPadOS devices. One of such setting is to customize dock and home screen layout. The home screen layout setting applied to: iOS 9.3 or newer iPadOS 13.0 and newer Automated device enrollment (supervised) When you apply a home screen layout through Intune policy, it’s overwrites any user defined layouts. Hence, it’s recommended to use this policy for userless device such as Kiosk or user device where you want to show only limited applications on home screen. Else, this may lead to user dissatisfactio ..read more

When you try to sign-in to any M365 apps on Microsoft Intune managed iOS / iPadOS devices ( iPads / iPhones ), the messages something went wrong – 2002 may appear. The issue happens to all Microsoft 365 / o365 apps which includes MS Excel , Word , PowerPoint , OneDrive , Power BI etc. There may be different reason behind this error. Different online forums talk about different issues behind this error. However in this blog post, we will discuss about the issue which caused Something went wrong. [2002] error for us and how we fixed that. Why Does the Sign-In Error 2002 Occur We noticed that ..read more

A dynamic group membership updates automatically based on defined rules. You can create attribute-based rules to update the group membership. You can create a dynamic group in Entra ID for users or devices. However, you can’t create rules that contain both the user and the device. You can add multiple membership rules in a dynamic device group. In this article, we will explain how to create an Azure AD dynamic group / Intune dynamic device group based on the device enrolment profile. You can have multiple enrolment profiles for different user groups or departments based on business requirement ..read more

Microsoft Intune has built-in policies that can manage software updates on iOS/iPadOS supervised devices. It’s recommended to use these policies to manage software updates through Intune and not leave the responsibility to install software updates to the end users. Leaving iOS update responsibility to the end user may lead to different issues. Users can apply iOS updates that your organization has not approved. This may break applications if they are not compatible with the latest iOS version. Users may also opt to simply avoid applying the required updates leaving the device vulnerable to sec ..read more

Microsoft Intune includes some built-in settings to configure different Apple features on iOS/iPadOS devices. One of such setting is to show or hide built-in (native) apps. You can configure the policy for visible or hidden apps through Intune device restriction profiles. This feature applies to below iOS/iPadOS versions. iOS 9.3 and newer iPadOS 13.0 and newer These settings are available for Automated Device Enrollment (Supervised) devices. How to Show or Hide Built-In iOS Apps Follow the below steps to create an Intune device restrictions profile to show or hide iOS native apps. App ..read more

Microsoft Intune includes some built-in settings to configure different Apple features on iOS/iPadOS devices. One of such setting is to customize dock and home screen layout. The home screen layout setting applied to: iOS 9.3 or newer iPadOS 13.0 and newer Automated device enrollment (supervised) When you apply a home screen layout through Intune policy, it’s overwrites any user defined layouts. Hence, it’s recommended to use this policy for userless device such as Kiosk or user device where you want to show only limited applications on home screen. Else, this may lead to user dissatisfactio ..read more

A dynamic group membership updates automatically based on defined rules. You can create attribute-based rules to update the group membership. You can create a dynamic group in Entra ID for users or devices. However, you can’t create a rule that contains both the user and the device. You an add multiple membership rules in a dynamic device group. In this article, we will explain how to create azure AD dynamic group / Intune dynamic device group based on device enrolment profile. You can have multiple enrolment profiles for different user groups or departments based on business requirements. The ..read more