Apple enrollment - Enrollment type profiles

Question

question

andreasbright-4989 asked Feb 16, '21 LuDaiMSFT-0289 commented Feb 26, '21

Apple enrollment - Enrollment type profiles

Hi,

Today when a user is hired they buy a new iphone themself at the regular store, and download the company portal and sign in with their work email, then apps and policies are pushed to this device.
I have looked at enrollment type profiles but do not see the complete picture here. If I configure "Device enrollment" will then the device be marked as "Ownership=Corporate" ? And If I create "User enrollment" will then the device be marked as "Ownership=Personal" ?

I know today the devices come in as "Personal" and I thought I changed them to "Corporate" but it seems like they have changed back ? hmmm....

If I do not configure enrollment type profile I was not asked during the enrollment if its a personal or corporate device, I thought I was going to be asked for that ?

Is the only main difference between Personal and Corporate that we can see manged apps ? Because today I can see managed apps on the iphones that are marked personal....

Thanks for reply

/R
Andy

mem-intune-general mem-intune-enrollment

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-02-16T23:49:09.413Z

PaD-7009 answered Feb 16, '21

You have to use Apple Business manager or Apple Configurator with Intune to enroll. This way the Devices are treated corporate.
https://docs.microsoft.com/en-us/mem/intune/enrollment/ios-enroll

Other way is to add serial number manually.
https://docs.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add

The difference with corporate device is as you said inventory for apps and other things it can do is full phone numbers and if you use Apple Business manager, you also get device into "Supervised" state, which gives you deeper control of the device.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2021-02-17T02:58:28.8Z

LuDaiMSFT-0289 answered Feb 17, '21

@andreasbright-4989 Thanks for posting in our Q&A.

For this issue, I agree with PaD.

I will add a few information about iOS Enrollment. For iOS enrollment, we can see iOS “User Enrollment” mode as the BYOD mode, so it is marked as "personal". If we do not configure enrollment type profile, it is also BYOD. If we choose "Determine based on user choice", we will be given choice of which enrollment type to use.

Thanks for understanding.

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2021-02-17T06:45:45.033Z

andreasbright-4989 answered Feb 17, '21 LuDaiMSFT-0289 commented Feb 26, '21

Hi,

Thanks for answers @LuDaiMSFT-0289 @PaD-7009

Correct me if I am wrong,

We do not configure enrollment profile = Devices are enrolled as personal (I can switch it manually to corporate, but after a while it automatically switch back?)
We do configure enrollment profile and set this to Device = Devices are registered as Corporate ?

Thanks

/R
Andy

· 3

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 · Feb 17, 2021 at 08:20 AM

@andreasbright-4989 Thanks for your reply.

In my test, I don't configure enrollment profile and devices are enrolled as personal. If we switch it to corporate manually, it will not switch back.

For configuring enrollment profile to device enrollment, devices are registered as personal. If we want to mark devices as corporate, these are only these ways in the following link.

https://docs.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add

Hope it will help.

0 ·

image.png (243.0 KiB)

LuDaiMSFT-0289 LuDaiMSFT-0289 · Feb 26, 2021 at 09:26 AM

@andreasbright-4989 I haven't heard from you for a long time. Is this information that I provided is useful? I'm looking forward to your response.

0 ·

PaD-7009 · Feb 17, 2021 at 08:46 PM

Andy,

In option 1:
Changing the tag from "Personal" to "Corporate" is not same as devices being tagged as "Corporate" by using option 2. (using ABM or Corp Identifier).
By doing this manually you are just changing the tag. It is still treated as "Personal" and wont get those benefits of "Corporate" owned device.

In Option2:
You are correct. No additional steps needed.

0 ·

question