Great video Dean, be good to see more of this content for macOS management via Intune, there isn't much out there. I've just got myself a ABM lab environment too (took ages!), so happy to collaborate if fancy it! Be good to work out stuff, the good and the ugly lol. 👌👌
I hope one day the local account will be automatically setup using the entra id. I know with jamf you can skip the local account creation but jamf is an added cost to organizations.
hey Dean, awesome video. In my specific case, these Macs have already been deployed and are located with people all across the nation. I want to bring them in, but wont have that apple configurator app on my phone and the devices physically infront of me? These Macs are currently being used and not yet in intune - how do you approach that situation ? Thanks!
You forgot to mention that if you want to skip the Apple Configurator element you can buy your Devices through an Apple Authorised Reseller and they will automatically appear in Apple Business Manager as they can enrol them through DEP.
@@DeanEllerbyMVP I mean I just watched this at 6am so my brain may have skipped over it. We should have a chat around a few topics that are coming this year such as enhancements MAIDs and DDM, as some considerations for enterprise customers.
Good video, but would like to see MS add more options to configure. It is still pretty clunky for a user having to create a local account, separate from the Azure account they initially had to log in with.
I tried to bring this topic to my company as we struggle/avoid adding Mac to our environment ( today we have ConfigMgr + Co-Mgr with very few things depending on Intune) and here's my legit question but a bit unrelated, why do people stay Hybrid???, when it comes to managing it is just a pain in the A** to deal with it, I know very few companies have legal requirements that my justify staying on-prem or hybrid but IMO it is just about being lazy or afraid to move over completely, 3-4 years back fine, but today intune is so mature that I don't see any major gaps comparing the 2 models side by side. I'd love to hear your opinion in a video (considering all features Intune has today) why do people stay on-prem/hybrid?
great video. For the create a computer account step, does it means that it is an local administrator account and user can use that account to elevate installation and other system settings changes which requires to elevate as admin?
Thank you for this great video! Do you know if it is also possible to change the admin status of employees this way? Plus if it possible, to make it impossible to disconnect devices from the Tenant, same as what Autopilot would do?
Hey, thanks! Yes - you can use a script to remove local admin: github.com/microsoft/shell-intune-samples/blob/master/macOS/Config/Manage%20Accounts/readme.md
@DeanEllerby, Hello Sir, any chance that your course on Mastering Windows Autopilot with MS Intune will go back on sale soon? I had it booked marked yesterday and it was on sale but now its back to full price =(
You are absolutely right. I didn't include this. The recording of that part got corrupted, so I had to make a tough choice as to whether to re-record and push the video back a few days, or get it out as is. I plan to show the process for deploying the company portal in a separate video instead.
@@DeanEllerbyMVP, did you deploy company portal using the line of business app method, or script? I'm currently using LoB, but wonder if the shell script way is better.
I used LOB, but it seems to have failed with the following error, even though it installed fine! One or more apps contain invalid bundleIDs. (0x87D13BA2)
@@DeanEllerbyMVP I ran into the same issue, and was able to solve it. Go to the app / app information and edit the app. You'll see about half way down a section that says "Review the included apps list to edit apps or remove anything that isn’t an app." Remove all the items that have a app version of 1.0. You should only have two items in the list. com.microsoft.CompanyPortalMac and com.microsoft.autoupdate2 The LoB pachage will also need to be updated from time to time, and the same items removed from the package each time. I might try the script version next as it says in the docs it would always install the latest version.
Great video Dean, be good to see more of this content for macOS management via Intune, there isn't much out there. I've just got myself a ABM lab environment too (took ages!), so happy to collaborate if fancy it! Be good to work out stuff, the good and the ugly lol. 👌👌
Thanks Alex! Collab would be great.
Hi @Dean, what about apple mdm push certificate? Is it required to set up before doing this steps?
Excellent video
Thank you very much!
I hope one day the local account will be automatically setup using the entra id. I know with jamf you can skip the local account creation but jamf is an added cost to organizations.
hey Dean, awesome video. In my specific case, these Macs have already been deployed and are located with people all across the nation. I want to bring them in, but wont have that apple configurator app on my phone and the devices physically infront of me? These Macs are currently being used and not yet in intune - how do you approach that situation ? Thanks!
you can enter them by using company portal, but they won't be sync to ABM
Great video once again, Dean 👍. macOS ADE isn't showcased enough imo.
Agreed
You forgot to mention that if you want to skip the Apple Configurator element you can buy your Devices through an Apple Authorised Reseller and they will automatically appear in Apple Business Manager as they can enrol them through DEP.
I did? I thought I mentioned that! I definitely meant to 😂
@@DeanEllerbyMVP I mean I just watched this at 6am so my brain may have skipped over it. We should have a chat around a few topics that are coming this year such as enhancements MAIDs and DDM, as some considerations for enterprise customers.
That would be lovely!
best practices for configuration policy would be helpful next sir
Good video, but would like to see MS add more options to configure. It is still pretty clunky for a user having to create a local account, separate from the Azure account they initially had to log in with.
I agree! There is much more MS could do here to make it a really slick journey.
This is a big improvement from how Intune used to treat macOS computers though... So there is hope that it will only continue to improve 🤞🙂
I tried to bring this topic to my company as we struggle/avoid adding Mac to our environment ( today we have ConfigMgr + Co-Mgr with very few things depending on Intune) and here's my legit question but a bit unrelated, why do people stay Hybrid???, when it comes to managing it is just a pain in the A** to deal with it, I know very few companies have legal requirements that my justify staying on-prem or hybrid but IMO it is just about being lazy or afraid to move over completely, 3-4 years back fine, but today intune is so mature that I don't see any major gaps comparing the 2 models side by side.
I'd love to hear your opinion in a video (considering all features Intune has today) why do people stay on-prem/hybrid?
I agree. and I even made a video or two about it :-)
th-cam.com/video/66I2P6XjTyY/w-d-xo.html
Why would you choose to use local user affinity vs device affinity when setting up a Mac?
Do we need to give all users access to Apple Configurator? Or is this for IT Admins only?
This is for Admins who are preparing the device to be given to the user.
great video. For the create a computer account step, does it means that it is an local administrator account and user can use that account to elevate installation and other system settings changes which requires to elevate as admin?
Thank you for this great video! Do you know if it is also possible to change the admin status of employees this way? Plus if it possible, to make it impossible to disconnect devices from the Tenant, same as what Autopilot would do?
Hey, thanks! Yes - you can use a script to remove local admin: github.com/microsoft/shell-intune-samples/blob/master/macOS/Config/Manage%20Accounts/readme.md
@DeanEllerby, Hello Sir, any chance that your course on Mastering Windows Autopilot with MS Intune will go back on sale soon? I had it booked marked yesterday and it was on sale but now its back to full price =(
Hi! Here's a code set to the highest discount % - hopefully this works!
www.udemy.com/course/learn-autopilot/?couponCode=YT-AUG
Thank you sir@@DeanEllerbyMVP
Thank you for this video
No worries!
There is really no feature yet to configure the local account?
it just came out this week but is lacking a bit fo flexibility
Excellent
You didn’t show how Company Portal is deployed
You are absolutely right. I didn't include this. The recording of that part got corrupted, so I had to make a tough choice as to whether to re-record and push the video back a few days, or get it out as is. I plan to show the process for deploying the company portal in a separate video instead.
@@DeanEllerbyMVP, did you deploy company portal using the line of business app method, or script? I'm currently using LoB, but wonder if the shell script way is better.
I used LOB, but it seems to have failed with the following error, even though it installed fine!
One or more apps contain invalid bundleIDs. (0x87D13BA2)
@@DeanEllerbyMVP I ran into the same issue, and was able to solve it. Go to the app / app information and edit the app. You'll see about half way down a section that says "Review the included apps list to edit apps or remove anything that isn’t an app." Remove all the items that have a app version of 1.0. You should only have two items in the list. com.microsoft.CompanyPortalMac and com.microsoft.autoupdate2 The LoB pachage will also need to be updated from time to time, and the same items removed from the package each time. I might try the script version next as it says in the docs it would always install the latest version.
@DeanEllerbyMVP, Thanks again for all your great videos. FYI, I'm one of the guys you did the escape room with at MMSMOA. 🙂