add existing devices to dep
|
Device Enrollment Program Guide
All iOS macOS and tvOS devices added to DEP will be enrolled automatically in MDM Automatic enrollment ensures that devices are configured based on your organization’s requirements and guarantees that all users receive those configurations on their devices Your users’ devices are also locked in MDM for ongoing management Wireless supervision |
How do I assign new devices to an MDM server?
By designating an MDM server as the default, you may automatically assign newly purchased devices to it. If you’ve acquired devices outside of Apple or participating Apple Authorized Resellers or carriers, they can also be added to DEP using Apple Configurator.
Overview
Personal and organization-owned devices can be enrolled in Intune. Once they're enrolled, they receive the policies and profiles you create. You have the following options when enrolling iOS/iPadOS devices: •Automated device enrollment (ADE) •Apple Configurator •BYOD: User and Device enrollment This article provides enrollment recommendations and includes an overview of the administrator and user tasks for each iOS/iPadOS option. There's also a visual guide of the different enrollment options for each platform: learn.microsoft.com
Before you begin
For all Intune-specific prerequisites and configurations needed to prepare your tenant for enrollment, see Enrollment guide: Microsoft Intune enrollment. learn.microsoft.com
Automated Device Enrollment (ADE) (supervised)
Previously called Apple Device Enrollment Program (DEP). Use on devices owned by your organization. This option configures settings using Apple Business Manager (ABM) or Apple School Manager (ASM). It enrolls a large number of devices, without you ever touching the devices. These devices are purchased from Apple, have your preconfigured settings, and can be shipped directly to users or schools. You create an enrollment profile in the Intune admin center, and push this profile to the devices. For more specific information on this enrollment type, see: •Apple Business Manager enrollment •Apple School Manager enrollment: For more information on Apple School Manager, see Apple education (opens Apple's web site). learn.microsoft.com
Apple Configurator enrollment
Apple Configurator administrator tasks This task list provides an overview. For more specific information, see Apple Configurator enrollment. •Requires access to a Mac computer with a USB port. •Be sure your devices are supported. •Be sure the Apple MDM push certificate is added to Intune, and is active. This certificate is required to enroll iOS/iPadOS devices. For more information, see Get an Apple MDM push certificate. •Decide how users will authenticate on their devices: the Company Portal app, or Setup Assistant. Make this decision before you create the enrollment profile. Using the Company Portal app is considered modern authentication. We recommend using the Company Portal app. •Select the Company Portal app when: •You want to use multi-factor authentication (MFA). •You want to prompt users to update their expired password when they first sign in. •You want to prompt users to reset their expired passwords during enrollment. •You want devices registered in Microsoft Entra ID. When they're registered, you can use features available with Microsoft Entra ID, such as conditional access. •You want to automatically install Company Portal app during enrollment. If your company uses the Volume Purchase Program (VPP), you can automatically install Company Portal app during enrollment. •Select the Setup Assistant when: •You don't want to use modern authentication features, such as MFA. •You want to wipe the device. •You want to import serial numbers. •You don't want to register devices in Microsoft Entra ID. Setup Assistant authenticates the user with the exported enrollment profile that you copy to the device. If it's acceptable to not register devices in Microsoft Entra ID, then you don't need to install the Company Portal app. Keep using the Setup Assistant. If you want devices registered in Microsoft Entra ID, then install the Company Portal app. When you create the enrollment profile and select Setup Assistant, you can install the Company Portal app. We recommend installing the Company Portal app during enrollment. •If you use the Company Portal app, then the Company Portal app must be installed on devices using an app configuration policy. We recommend creating this policy before you create the enrollment profile. Don't install the Company Portal app from the app store directly on Apple Configurator-enrolled devices. Instead, install the Company Portal app using the following options: •Enroll new devices: No administrator tasks. Make sure users enter their Apple ID in Setup Assistant. When Setup Assistant completes, the Company Portal app tries to automatically install. If users don't enter their Apple ID (user@iCloud.com or user@gmail.com), then they're continually prompted to enter their Apple ID. Users must enter their Apple ID to get the Company Portal app on their devices. When the Company Portal app installs, users open it, and enter their organization credentials (user@contoso.com). When they authenticate, users can install and use apps used by your organization, including LOB apps. •Already enrolled devices: If devices are already enrolled, then use an app configuration policy: 1.In the Intune admin center, add the Company Portal app as a required app, and as a device licensed app. 2.Create an app configuration policy that includes the Company Portal app as a device licensed app. For more specific information, see Configure the Company Portal app to support iOS and iPadOS DEP devices. 3.Deploy the app configuration policy to the same device group as the enrollment profile. 4.When devices check in with the Intune service, it receives your profile, and the Company Portal app installs. This option: •Includes the correct Company Portal app version. •Requires you to create an enrollment profile, and create an app configuration policy. In your app configuration policy, make it a required app so you know the app deploys to all your devices. •The Company Portal app can be automatically updated by changing your existing app configuration policy. •In the Intune admin center, create an enrollment profile: •Choose to Enroll with user affinity (associate a user to the device), or Enroll without user affinity (user-less devices or shared devices). •If you choose Enroll without user affinity, then you're automatically using Direct enrollment. Remember: •You're using the settings from an existing macOS enrollment profile. •Users can't use apps that require a user, including the Company Portal app. The Company Portal app isn't used, needed, or supported on enrollments without user affinity. Be sure users don't install the Company Portal app from the Apple app store. •When the enrollment profile is ready, USB connect the devices to the Mac, and open the Apple Configurator app. When the app opens, it detects the USB connected device, and deploys the Intune enrollment profile you created. Apple Configurator end user tasks The tasks depend on the option you configured in the enrollment profile. •Enroll with user affinity + Company Portal app: 1.When the device is turned on, the Apple Setup Assistant runs. Users enter their Apple ID (user@iCloud.com or user@gmail.com). Once entered, the Company Portal app is automatically installed from the app store. It can take some time for the Company Portal app to auto-install. 2.Open the Company Portal app, and sign in with their organization credentials (user@contoso.com). When users sign-in, the enrollment starts. When enrollment completes, users can install and use apps used by your organization, including LOB apps. •Enroll with user affinity + Setup Assistant + Company Portal app: 1.When the device is turned on, the Apple Setup Assistant runs. Users enter their organization credentials (user@contoso.com). This step enrolls the device in Intune. 2.The Setup Assistant prompts the user for information, including the Apple ID (user@iCloud.com or user@gmail.com). 3.The Company Portal app automatically installs from the app store. Users open the Company Portal app, and sign in with their organization credentials (user@contoso.com). This step registers the device in Microsoft Entra ID. Users can install and use apps used by your organization, including LOB apps. •Enroll with user affinity + Setup Assistant - Company Portal app: 1.When the device is turned on, the Apple Setup Assistant runs. Users enter their organization credentials (user@contoso.com). This step enrolls the device in Intune. 2.The Setup Assistant prompts the user for information, including the Apple ID (user@iCloud.com or user@gmail.com). This step pushes the Intune management profile to the device. 3.Users install the management profile. The profile checks-in with the Intune service, and enrolls the device. The device isn't registered in Microsoft Entra ID. •Enroll without user affinity: You're using Direct enrollment. No actions. Be sure they don't install the Company Portal app from the Apple app store. learn.microsoft.com
BYOD: User and Device enrollment
These iOS/iPadOS devices are personal or BYOD (bring your own device) devices that can access organization email, apps, and other data. Starting with iOS 13 and newer, this enrollment option targets users or targets devices. It doesn't require resetting the devices. When you create the enrollment profile, you're asked to choose User enrollment with Company Portal, Device enrollment with Company Portal, Account driven user enrollment, or Determine based on user choice. learn.microsoft.com
Next steps
MAMAndroid enrollment guideLinux enrollment guidemacOS enrollment guideWindows enrollment guide learn.microsoft.com
How to add iOS 11 devices to DEP with Apple Configurator 2.5
How to configure DEP in Apple Business Manager and enroll your devices in Hexnode MDM.
How to Add Device to DEP using Apple Configurator
|
Apple Deployment Programs Device Enrollment Program Guide
All iOS macOS |
|
Apple Business Manager - Getting Started Guide
The Device Enrollment Program (DEP) and the Volume Purchase Program manage accounts for employees that integrate with existing infrastructure and. |
|
Apple Deployment Programs Device Enrolment Program Guide
The Device Enrolment Program (DEP) is part of the Apple Deployment Programs (ADP) Important information about existing Volume Purchase Program accounts. |
|
Apple Deployment Programs Volume Purchase Program Guide
Important Information about Existing Device Enrollment Program (DEP) Accounts device via MDM or added by Apple Configurator 2—no invitation is required. |
|
Overview of Managed Apple IDs for Business
to employees using their existing corporate credentials. Managed Apple IDs can be used alongside a personal. Apple ID on employee-owned devices when |
|
Check Point SandBlast Mobile MDM Integration Guide for
31 May 2017 Scroll down and select “View Apple DEP device information”. 2.3.1.5. ... 2.6 Adding a Device to an Existing User. 2.6.0.1. |
|
Device Enrolment Program Guide
Note: If your VPP for Education account was created before 26 February 2014 you will not be able to use your existing agent account to enrol in the DEP. You |
|
Apple Deployment Programs Volume Purchase Program Guide
Important Information about Existing Device Enrollment Program (DEP) Accounts device via MDM or added by Apple Configurator 2—no invitation is required. |
|
FAQs for DTX and RMI ezFiling
1. How do I register my devices for the first time with DEEP or renew or modify an existing registration (e.g. add a device to an. |
|
BlackBerry UEM - Activating devices
Register iOS devices in DEP and assign them to the BlackBerry UEM server. If you have existing accounts on this device tap Add Account. |
|
View the Apple Business Manager Getting Started Guide
The Device Enrollment Program (DEP) and the Volume Purchase Program Note: Book purchases in Apple Business Manager are not available in certain add additional accounts, enter purchase information, and assign roles to begin |
|
Device Enrollment Program - Mobility MEA
The Device Enrollment Program (DEP) helps businesses easily All iOS, macOS, and tvOS devices added to DEP will be enrolled automatically in MDM DEP is available to qualifying businesses that purchase iPad, iPhone, Mac, or |
|
ZENworks Mobile Management 31x iOS Supervised Devices
You agree not to export or re-export to entities on the current U S Like configurator devices, a DEP device does not install the ZENworks Mobile Management |
|
ZENworks 2017 Mobile Management Reference - Novell History
Add Device Enrollment Program (DEP) role to the ZENworks will continue using the existing GCM configuration to communicate with enrolled mobile devices |
|
Apple Business Manager
The Device Enrollment Program (DEP) and the Volume Purchase Program a higher level of device management options become available for iOS and Add additional accounts for managing devices or content, delegate privileges, |
|
Guide-Apple Business Manager - Scalefusion
This DEP customer ID will be available under the settings section To add your devices purchased from Authorized Reseller or carrier to Apple Business Manager, |
|
Apple DEP Overview and Process - ATAMAtech
“Can we supervise the devices through DEP?” “What about my existing devices?” has been setup and verification has been complete, you will need to add |
|
Activating devices - BlackBerry Docs
Register iOS devices in DEP and assign them to the BlackBerry UEM server 45 Add BlackBerry UEM server information to Apple Configurator 2 Code is not available in the activation email template 7 |
|
Apple Business Manager AT&T Business
AT&T Device Enrollment Enablement Program that integrates with your existing mobile device configures all existing devices purchased in the past 2 years |
|
IOS Device Management - VMware Workspace ONE - VMware Docs
Apple Business Manager's Device Enrollment Program (DEP) Disable adding or removing existing Touch ID information (iOS 8 1 3 and later, Supervised) ▫ |
.png "Download as a PDF - Citeseer")
