Do you first sign in with user account or admin account to make this Iphone fully managed by intune?

TechQ 236 Reputation points
2023-10-05T10:55:02.4366667+00:00

I am using intune and Azure AD connect to manage a IOS( iPhone) device, I have configured everything on the intune, and now I am planning give a fully managed device to a user but my question is when you make this phone fully managed, do you first sign in with Admin account or user account to make this fully managed? Because this phone will be given to the user and if I sign in with admin log in, doesn't it mean its for the Admin? Or in order to make this phone fully managed you always have to frist sign in with admin account then when you hand over the phone to a user, they have to sign in bsck with there account?

Note; Its corporate fully managed IOS/iPhone that I am talking about.

Microsoft Intune iOS
Microsoft Intune iOS
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.iOS: An Apple mobile operating system.
202 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,666 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Domooney-MSFT 2,566 Reputation points Microsoft Employee
    2023-10-05T13:21:10.4566667+00:00

    Hi @TechQ

    Thank you for posting your query on Microsoft Q&A.

    To answer your question, you should always let the user sign-in with their own account. And have the InTune / Endpoint management policies applied to the user or device.

    If you log into the users device with admin credentials then it will potentially persist this login token, and allow the user to select the admin account when signing into applications.

    We have a guide here on the various options for iOS device enrollment - https://video2.skills-academy.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment-ios-ipados

    Do let me know if you have any further questions, I would be happy to help!

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments
  2. Crystal-MSFT 45,656 Reputation points Microsoft Vendor
    2023-10-06T01:41:21.4633333+00:00

    @TechQ, Thanks for posting in Q&A. Before going on, I would explain some information for you:

    For Azure AD connect, now it changes name to Microsoft Entra Connect.

    https://video2.skills-academy.com/en-us/azure/active-directory/fundamentals/new-name#glossary-of-updated-terminology

    Microsoft Entra Connect is an on-premises Microsoft application that's designed to meet and accomplish your hybrid identity goals. So it is not used for iPhone.

    https://video2.skills-academy.com/en-us/azure/active-directory/hybrid/connect/whatis-azure-ad-connect

    For iPhone, to enroll the user associated device as corporate device, you can choose to enroll with ADE or Apple Configurator (Setup Assistant enrollment).

    https://video2.skills-academy.com/en-us/mem/intune/enrollment/corporate-identifiers-add

    For ADE enrollment, it is mainly used for the device purchased via Apple Business Manager. And you have Apple Business Manager access. To do the enrollment, you can refer to the following link:

    https://video2.skills-academy.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios

    If it is not purchased via Apple Business Manager, you can consider Apple Configurator Setup Assistant enrollment. Here is a link with the steps to do the enrollment.

    https://video2.skills-academy.com/en-us/mem/intune/enrollment/apple-configurator-enroll-ios

    For the above enrollment methods, you need to sign in the user's Azure AD user account instead of admin account. And also please ensure the user has Microsoft Intune Plan 1 license assigned before we enroll device.

    https://video2.skills-academy.com/en-us/mem/intune/fundamentals/licenses

    Hope the above information can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.