Back in 2015 I wrote a blog about Mac management with Intune, however it’s been a few years and I feel it’s time we re-visit Mac management with Intune to learn more about what’s changed. You’ll soon learn there’s been a significant amount of progress and since my first post Intune now has a lot of native Mac management capabilities built in. 2019-12-5 Before directing users to register their Mac computers with Azure Active Directory (Azure AD), it is necessary to deploy Microsoft's Company Portal app. Deploying the Company Portal app involves the following steps: Download the Company Portal app from Microsoft. Upload the Company Portal app to Jamf Pro as a package. We have Intune integrated with Apple DEP/ABM. We want to manage MAC device using Intune + DEP My question is how can i deploy intune company portal to mac OS? Verification You can choose to use Apple VPP for deploying the Company Portal when you create Apple DEP Profile. Before that, you need to purchase (free app) Intune Company Portal in your. When you install the Company Portal app and enroll your macOS device in Intune, you can use the Company Portal app to: Access the company’s network, and your email and work files. Get company apps from the Company Portal. Remotely reset your phone to factory settings if it is lost or stolen. Automatically set up your company email account.
Intune lets you manage macOS devices to give users access to company email and apps.
As an Intune admin, you can set up enrollment for company-owned macOS devices and personally owned macOS devices ('bring your own device' or BYOD).
Complete the following prerequisites before setting up macOS device enrollment:
You can let users enroll their own personal devices into Intune management. This is known as 'bring your own device' or BYOD. After you've completed the prerequisites and assigned user licenses, your users can enroll their devices by:
You can also send your users a link to online enrollment steps: Enroll your macOS device in Intune.
For information about other end-user tasks, see these articles:
For organizations that purchase devices for their users, Intune supports the following macOS company-owned device enrollment methods:
By default, Intune lets macOS devices enroll. To block macOS devices from enrollment, see Set device type restrictions.
Note
macOS virtual machines are only supported for testing. You should not use macOS virtual machines as production devices for your end users.
You can enroll macOS virtual machines for testing using either Parallels Desktop or VMware Fusion.
For Parallels Desktop, you need to set the hardware type and the serial number for the virtual machines so that Intune can recognize them. Follow Parallels' instructions for setting hardware type and serial number to set up the necessary settings for testing. We recommend that you match the hardware type of the device running the virtual machines to the hardware type of the virtual machines that you're creating. You can find this hardware type in Apple menu > About this Mac > System Report > Model Identifier.
For VMware Fusion, you need to edit the .vmx file to set the virtual machine's hardware model and serial number. We recommend that you match the hardware type of the device running the virtual machines to the hardware type of the virtual machines that you're creating. You can find this hardware type in Apple menu > About this Mac > System Report > Model Identifier.
User Approved MDM enrollment is a type of macOS enrollment that you can use to manage certain security-sensitive settings. For more information, see Apple's support documentation.
During the BYOD enrollment process, the user will be asked to manually approve the Apple management profile. Instructions are provided in the Company Portal app for macOS. Although approval of the management profile is not required to complete enrollment, Intune recommends user approved enrollments. If the user does not approve the profile during enrollment, the user can go to System Preferences > Profiles, choose the management profile, and select Approve.
After macOS devices are enrolled, you can create custom settings for macOS devices.
This applies for both Office 365 for Mac and Office 2019 for Mac users. What about Office 2016 for Mac? If you have a one-time purchase of Office 2016 for Mac or you have Office 365 for Mac and are using the Office 2016 for Mac build on macOS versions earlier than 10.13, your. Important note for Office 365 subscriptions: After September 22, 2016, Office 2011 for Mac is no longer available for installation with an Office 365 subscription.This doesn't affect one-time purchases of Office for Mac 2011 such as, Office Home and Student, Office Home and Business, or Office Professional.
Microsoft released a beta version of the Intune Company Portal for macOS just last month; however, it’s since been pulled from the Download Center. This app had been made available along with the announcement of Conditional Access supporting macOS in preview.
Edit: the download is now available again: https://www.microsoft.com/en-us/download/details.aspx?id=55770
Installing the Company Portal is required to enable Conditional Access support on macOS, so I imagine a new version will be made available soon. If you’re testing with Macs or looking for full support with Intune, this is an important part of the puzzle.
Previous to the Company Portal on macOS, enrollment in Intune is a largely manual process that requires logging into the Intune web portal with a browser, downloading a management profile and installing that manually. Not the best user experience.
Here’s what that looks like:
With the Company Portal, the user experience is streamlined, with the management profile installed automatically and you can see device compliance status from within the app. Here’s a quick look at the end-user experience with the Intune Company Portal for macOS on macOS Sierra.
Hopefully we’ll see the portal app available for download again soon and available for wider testing. I’m also hoping that the availability of the Portal app means we’ll see the ability for Intune to install apps on macOS. As we see more Mac devices (either corporate or personally owned), the ability to deploy and manage apps on this platform becomes critical.