Apple enrollment - Enrollment type profiles

andreas bright 561 Reputation points
2021-02-16T17:03:22.083+00:00

Hi,

Today when a user is hired they buy a new iphone themself at the regular store, and download the company portal and sign in with their work email, then apps and policies are pushed to this device.
I have looked at enrollment type profiles but do not see the complete picture here. If I configure "Device enrollment" will then the device be marked as "Ownership=Corporate" ? And If I create "User enrollment" will then the device be marked as "Ownership=Personal" ?

I know today the devices come in as "Personal" and I thought I changed them to "Corporate" but it seems like they have changed back ? hmmm....

If I do not configure enrollment type profile I was not asked during the enrollment if its a personal or corporate device, I thought I was going to be asked for that ?

Is the only main difference between Personal and Corporate that we can see manged apps ? Because today I can see managed apps on the iphones that are marked personal....

Thanks for reply

/R
Andy

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,244 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,327 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pa_D 1,071 Reputation points
    2021-02-16T23:49:09.413+00:00

    You have to use Apple Business manager or Apple Configurator with Intune to enroll. This way the Devices are treated corporate.
    https://learn.microsoft.com/en-us/mem/intune/enrollment/ios-enroll

    Other way is to add serial number manually.
    https://learn.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add

    The difference with corporate device is as you said inventory for apps and other things it can do is full phone numbers and if you use Apple Business manager, you also get device into "Supervised" state, which gives you deeper control of the device.

    0 comments
  2. Lu Dai-MSFT 28,346 Reputation points
    2021-02-17T02:58:28.8+00:00

    @andreas bright Thanks for posting in our Q&A.

    For this issue, I agree with PaD.

    I will add a few information about iOS Enrollment. For iOS enrollment, we can see iOS “User Enrollment” mode as the BYOD mode, so it is marked as "personal". If we do not configure enrollment type profile, it is also BYOD. If we choose "Determine based on user choice", we will be given choice of which enrollment type to use.

    Thanks for understanding.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  3. andreas bright 561 Reputation points
    2021-02-17T06:45:45.033+00:00

    Hi,

    Thanks for answers @Lu Dai-MSFT @Pa_D

    Correct me if I am wrong,

    1. We do not configure enrollment profile = Devices are enrolled as personal (I can switch it manually to corporate, but after a while it automatically switch back?)
    2. We do configure enrollment profile and set this to Device = Devices are registered as Corporate ?

    Thanks

    /R
    Andy