Enroll macOS in Intune: A Step-by-Step Guide for Beginners

This guide demonstrates the steps to enroll macOS in Intune. Microsoft Intune supports enrollment on personal and company-owned devices. We will enroll macOS devices into Microsoft Intune using the Company Portal app to gain secure access to organization’s email, files, and apps.

When you enroll your macOS device in Intune, it is called a managed device. Intune can manage macOS devices efficiently provided they fall under supported devices list. Your organization can assign policies and apps to macOS devices using an MDM solution such as Intune.

This article describes how to use the Company Portal app for macOS to set up and maintain your device so that you meet your organization’s requirements. Like Windows devices, the company portal app can be installed on your macOS and you can enroll macOS into Intune.


Refer to these useful guides related to device enrollment in Intune:


  • Enroll iOS iPadOS devices in Microsoft Intune
  • Configure Intune Device Enrollment Restrictions
  • Enroll Windows 11 Devices in Intune with 2 Easy Methods
  • Enroll Windows 10 devices in Intune
  • Enroll HoloLens 2 Device for Autopilot Deployment

https://www.truecrimecollectors.com/showthread.php?tid=6656

https://scort.vip/forum/viewtopic.php?t=2288

https://scort.vip/forum/viewtopic.php?t=3648

https://scort.vip/forum/viewtopic.php?t=2205

https://scort.vip/forum/viewtopic.php?t=3328

http://orphe7.free.fr/forum/viewtopic.php?p=546

http://orphe7.free.fr/forum/viewtopic.php?p=799

http://orphe7.free.fr/forum/viewtopic.php?p=503

http://forum.kirmash.biz/viewtopic.php?id=65

http://forum.kirmash.biz/viewtopic.php?id=7892

http://forum.kirmash.biz/viewtopic.php?id=14432

https://git.forum.ircam.fr/-/snippets/5403

https://tasarhoa.com/hoa/viewtopic.php?t=99599

https://tasarhoa.com/hoa/viewtopic.php?t=96151

http://okcoding.co.kr/g5/bbs/board.php?bo_table=free&wr_id=834

http://jjcatering.co.kr/g5/bbs/board.php?bo_table=qna&wr_id=170766

http://chul.genureits.co.kr/bbs/board.php?bo_table=visitors&wr_id=134282

http://www.hondaikmciledug.co.id/HRIS/showthread.php?tid=116&pid=121#pid121

https://www.mcmon.ru/showthread.php?tid=1064

https://forum.metalheartradio.com/thread-1361-post-20267.html

http://ordemdospsicologos.org/forum/showthread.php?tid=1933


What happens after you enroll macOS devices in Intune?


Before you enroll your macOS devices into Intune, let’s understand about the benefits that you get. When you enroll macOS in Intune, you give your IT support permission to manage your device to help protect the company information on the device. When your Mac device is enrolled, your company support can:


  • Reset your device back to manufacturer’s default settings if the device is lost or stolen.
  • Remove all installed company-related data and business apps. Your personal data and settings aren’t removed.
  • Require you to have a password or PIN on the device.
  • Require you to accept terms and conditions.
  • Disable the camera on your device to prevent you from taking pictures of sensitive company data.
  • Enable or disable web browsing on your device.
  • Enable or disable backup, document sync, Photo Stream to iCloud.
  • Enable or disable data roaming on your device. If data roaming is allowed, you might incur roaming charges.
  • Enable or disable voice roaming on your device. If voice roaming is allowed, you might incur roaming charges.
  • Enable or disable automatic file synchronization while in roaming mode on your device. If automatic file synchronization is allowed, you might incur roaming charges.


Prerequisites for enrolling macOS devices in Intune

To enroll macOS in Intune, following are the prerequisites:


  • Intune now supports macOS 10.15 and later. Review the Intune Monthly updates for more information.
  • You must download and install Company Portal app for macOS before enrollment.
  • Intune company portal can only be installed on macOS version 11 or later.
  • To log in to the company portal, you’ll need a user account with an Intune license.
  • Maintain an internet connection until all steps are complete.
  • Have access to Safari web browser on your device.

https://expectingtheunexpected.com/showthread.php?tid=5449

http://www.yypf.com/showthread.php?tid=1031

http://heroicfantasygames.free.fr/Forum/viewtopic.php?p=86385

http://heroicfantasygames.free.fr/Forum/viewtopic.php?p=46237

http://heroicfantasygames.free.fr/Forum/viewtopic.php?p=86460

http://eldoradofus.free.fr/forum/viewtopic.php?pid=11797

http://eldoradofus.free.fr/forum/viewtopic.php?pid=11555

http://eldoradofus.free.fr/forum/viewtopic.php?pid=10543

http://www.iphoneforumz.com/forum/viewtopic.php?t=41824

http://www.iphoneforumz.com/forum/viewtopic.php?t=39655

http://www.iphoneforumz.com/forum/convert-videos-blu-ray-dvd-to-mp4-for-acer-iconia-tab-a500-t139340.html

http://www.iphoneforumz.com/forum/viewtopic.php?t=79877

https://www.101skins.com.tw/forum.php?mod=viewthread&tid=4021050

https://www.101skins.com.tw/forum.php?mod=viewthread&tid=4042409

https://www.101skins.com.tw/forum.php?mod=viewthread&tid=4026117

https://www.101skins.com.tw/forum.php?mod=viewthread&tid=4038452

https://forum.interstate420productions.com/viewtopic.php?t=37301

https://forum.interstate420productions.com/viewtopic.php?t=17033

https://forum.interstate420productions.com/viewtopic.php?f=9&t=23377

https://forum.interstate420productions.com/viewtopic.php?t=31320


Steps to Enrolling macOS Devices in Intune

The procedure to enroll macOS in Intune includes a series of steps that needs to be followed. After the successful enrollment of macOS, you can apply policies and configuration profile from Intune Portal.

The following high-level steps are involved in enrolling macOS devices into Intune.


  1. Check the prerequisites and ensure you are using supported macOS devices for enrollment.
  2. Apple MDM Push certificate configuration: Involves downloading the Intune certificate signing request and creating a new push certificate. Later, upload this push certificate in Intune portal.
  3. Install the Company Portal app on an macOS device and authenticate.
  4. Set up macOS devices to access your company resources.
  5. Manage macOS devices from Intune Portal.
  6. Note: If you have already created the Apple MDM push certificate during the enrollment of iOS devices in Intune, you can proceed with the next steps.


Step 1: Set up Apple MDM Push Certificate


An Apple MDM Push certificate is required to manage macOS devices in Microsoft Intune. You can configure Apple MDM push certificate with following steps:


  • Sign in to Microsoft Intune Admin Center.
  • Navigate to Devices > Enroll Devices > Apple Enrollment and click on Apple MDM Push Certificate.


On the Configure MDM Push Certificate window, select I agree to give Microsoft permission to send data to Apple. This is a mandatory step.


Step 2: Download the Intune Certificate Signing request


In this step, you have to download the Intune certificate signing request required to create an Apple MDM push certificate. Select Download your CSR to download and save the request file locally. Refer to the above screenshot for more details.

Shortly, the IntuneCSR.csr file will be downloaded and saved to the default location on your computer. We will need this file to request a trust relationship certificate from the Apple Push Certificates Portal.


Step 3. Create an Apple MDM Push Certificate


On the Configure MDM Push Certificate window, click Create your MDM push certificate. This is required to enroll macOS in Intune. A new link opens in your default browser and takes you to the Apple Push Certificates Portal. You must sign in with your company email address Apple ID, and then click Create a Certificate.

Comments

Post a Comment

Popular posts from this blog

2 Best Solutions: Error Can’t Connect to Windows 365

In this article, I will show you how to resolve the error can’t connect to Windows 365. If you are unable to access your Cloud PC using the Windows 365 app, there are two ways to solve this issue. I normally connect to my Cloud PC using the Windows 365 app. Note that there are multiple ways to connect and access your Cloud PCs. For instance, you can connect to a cloud PC using the Windows 365 home page, the Windows 365 App, or the Microsoft Remote Desktop client. Cloud PCs are accessible to users only after you assign Windows 365 licenses to users. Note that you should also provision Windows 365 Cloud PCs that allow users to access them from any device. In my case, the provisioning policy in place for Cloud PCs and a valid license was assigned to the user. In some cases, when you attempt to connect to Cloud PC, there may be gateway errors or connection errors. Refer to the following guide on troubleshooting Cloud PC connection errors, where I have covered solutions for Cloud PC access ...
Read more

Patch Server Core Installation with latest Windows Updates

In this guide, I will show you how to patch server core installation with the latest Windows Updates. Through Windows Update, you can install the latest patches on the server core automatically or manually install the latest updates. When you install the Server Core, it is recommended to install the latest patches to keep it secure and updated. Unlike Windows Server (installed with Desktop Experience), the Server Core doesn’t have a GUI to check for updates. When you have multiple server core installations in your setup, patching all them of the servers becomes a critical task. By patching a server core installation, you get the performance improvements and the known issues or bugs are fixed. Methods to Patch Server Core Installations https://expectingtheunexpected.com/showthread.php?tid=1495 https://forum.papbio.org/showthread.php?tid=4256 http://mystrotain.free.fr/forum/showthread.php?tid=15775 http://www.hondaikmciledug.co.id/HRIS/showthread.php?tid=846 http://forum.icohaberleri.com...
Read more

Fix Autopilot Profile Status Shows Not Assigned | Stuck Assigning

In this post, I will share some basic steps to resolve issue where the Autopilot profile status shows Not Assigned. If you don’t see the status of Autopilot deployment profile for devices as assigned, I will share multiple solutions to resolve the issue. When you create a Autopilot deployment profile, you assign the profile to a device group. This device group consists of computers that you have registered for Autopilot in Intune. The process of importing a device may take up to 15 minutes. You can run the refresh option to check if the device is imported successfully. After you have assigned the autopilot deployment profile to a device group, the profile status for the devices changes from Updating to Assigned. In some cases, the Autopilot profile status for devices gets stuck at the Assigning step and finally shows as Not Assigned. This is a common issue but gets resolved after waiting for a few hours. If the Autopilot Profile status shows not resolved and if this issue persists for ...
Read more