Configure Mac's with InTune

[kellow87]

Hi All

 

I'm currently managing all of my iOS devices with Microsoft Endpoint Manager which works great. Enrolling devices, deploying apps, configuring home screen, all works great.

 

I also have a suite of Mac's which I'd like to do the same thing but running into an issue with configuring the dock with specific apps and printing.

 

I know people are going to recommend using JAMF or another MDM but I pretty much have it working as i'd like, bar the two issues above.

 

Has anyone had any luck with these settings? The Mac's are domain joined and I use Papercut for printing.

 

Cheers

[tg12]

I don't have experience with InTune for managing Macs, but when I used to manage them at my last school, I used a custom profile to set the dock up. There was a great website I used for generating them, https://techion.com.au/blog/2015/4/28/dock-master where it would produce a .pkg or a profile that could be installed.

[mrnoisy]

Yes we have just deployed 140 m1 iMacs with intune all automated barring Adobe CC which won’t play !

[kellow87]

Can I ask how you deployed the dock and printers?

[dsmith8]

I believe you can do the dock using shell scrips GitHub - microsoft/shell-intune-samples: Sample shell scripts for Intune admins.

[kellow87]

Thanks for this link, going to give it a go this morning

[ColonelPanic]

I don't have experience with InTune for managing Macs, but when I used to manage them at my last school, I used a custom profile to set the dock up. There was a great website I used for generating them, https://techion.com.au/blog/2015/4/28/dock-master where it would produce a .pkg or a profile that could be installed.

A big +1 for this, we use it here too. Got 50 iMacs all MDMed with Intune.

We do use Munki to push out the apps (the ones that aren't VPP), like Adobe CC, Impero, and our PaperCut client.

[kellow87]

How do you guys who manage with InTune enroll your Mac's. I have two test Macs, one is enrolled with Setup Assistant and the other Company Portal. The dock script only works with the Company Portal enrolled Mac. Any ideas?

[ColonelPanic]

We used to do it with the manual profile enrollment, but now they're in Apple School Manager, we use that to enroll them into Intune.

[kellow87]

So when actually setting up the Mac initially, you enroll with Setup Assistant I'm assuming as that is the only option. I'm also using Apple School Manager.

[Mrpower]

I have been testing Intune as an option to manage our Macs. SO far I have added a Mac to Intune using the setup assessment software that adds the management profile to the Mac. However that's as far as I seem to be able to go. I have tried creating management profiles and applying them to the Mac but noting happens, it says it pushing the profile out to the Mac but nothing seem to ever be pushed or installed. Any ideas?

[kellow87]

Have you synced Endpoint Manager with Apple School Manager and then set the MDM for that Mac to Endpoint within Apple School Manager? This will allow you to push Remote Management Profiles to your devices. Also worth mentioning that you need to get your reseller of the Mac to add the Mac to your Apple School Manager account, so exchange of DEP ID's will allow this to work. Then change the MDM for the Mac to your Endpoint Manager.

 

Then within Endpoint Manager, go to Devices -> macOS -> macOS Enrollment -> Click your Microsoft Endpoint Manager token -> Devices -> Assign the enrollment profile to your device.

 

Then on startup after a fresh install of macOS, you should eventually be prompted to install the Remote Management Profile.

[Brimstone]

Yes we have just deployed 140 m1 iMacs with intune all automated barring Adobe CC which won’t play !

You can not use InTune to deploy apps out of VPP you have to use yet another tool.

[Brimstone]

How do you guys who manage with InTune enroll your Mac's. I have two test Macs, one is enrolled with Setup Assistant and the other Company Portal. The dock script only works with the Company Portal enrolled Mac. Any ideas?

This only works when you use the Company Portal..

 

InTune is so full of holes when it comes to managed macOS systems, that's why I always recommend Jamf as a much better MDM for macOS.

[Brimstone]

I don't have experience with InTune for managing Macs, but when I used to manage them at my last school, I used a custom profile to set the dock up. There was a great website I used for generating them, https://techion.com.au/blog/2015/4/28/dock-master where it would produce a .pkg or a profile that could be installed.

These custom profiles can break completely when you apply a point update for macOS.....

[Norphy]

You can not use InTune to deploy apps out of VPP you have to use yet another tool.

 

That's not right, not any more. You can assign VPP apps to Macs from Intune now.

 

https://learn.microsoft.com/en-us/mem/intune/apps/vpp-apps

 

I won't deny that there are better tools to manage Macs from, but Intune is just about good enough for a lot of people now.

Edited October 14, 2022 by Norphy

[kellow87]

You can, I do this on our Mac environment. Apps are purchased through Apple School Manager, then synced with Endpoint Manager, then deployed to our Mac devices.

[Brimstone]

That's not right, not any more. You can assign VPP apps to Macs from Intune now.

 

https://learn.microsoft.com/en-us/mem/intune/apps/vpp-apps

 

I won't deny that there are better tools to manage Macs from, but Intune is just about good enough for a lot of people now.

I should have been clearer...InTune does not support applications that you can not buy via VPP, e.g. Adobe, Sibelius, you have to use another tools to create a .pkg.