Setting up Apple Classroom with InTune

[GhostsInTheDark]

Hi

 

We've previously used Jamf as our MDM solution but are now moving to InTune.

 

We would create classes and add the students to the classes using Apple School Manager. Then the students would sign in to their 1:1 iPads with their Apple ID (using their school email address) and they would be automatically associated with their class.

 

Does this differ with the iPads being managed by InTune - or can we still do the same by creating the classes in ASM and then getting the students to sign into their iPads using their Apple IDs (using their school email address)?

 

Do we have to create classes in InTune? Or can we continue creating classes in ASM?

 

Thanks in advance.

[Brimstone]

You will have to use the same system as before, although you could create classes in Jamf MDM you can not do this with InTune. Edited December 14, 2021 by Brimstone

[adurrante]

You will have to use the same system as before, although you could create classes in Jamf MDM you can not do this with InTune.

 

Hi there, I am new to Apple School Manager and Classrooms. Could anyone elaborate on what the high-level steps to configure Intune to use the classrooms within Apple School Manager? Intunes documentation isn't great on this subject!

 

Many thanks

[Brimstone]

Hi there, I am new to Apple School Manager and Classrooms. Could anyone elaborate on what the high-level steps to configure Intune to use the classrooms within Apple School Manager? Intunes documentation isn't great on this subject!

 

Many thanks

 

 

InTune, when compared to Jamf, is a PITA, however...

 

InTune has no support for Apple Classroom for new users, you have create a Managed Apple ID in ASM for every user by either :

 

importing classes from your MIS using Salamander;

create them manually or the easiest way is to;

link your Apple School Manager account with Azure AD so that accounts in there sync and create the users in ASM.

 

This means if you have lots of shared iPads it's a fairly difficult and complex process if you are not 1:1.

 

Whilst Jamf can just import users into it's MDM so you can create classes on the fly with teachers and students

[adurrante]

Hi,

 

Thanks for that.

 

Understood, so we have ASM setup with Intune already, that part I understand. However, I am lost HOW the classes that will be manually setup within ASM sync to iPads, within Intune it says something about certs for both students and staff but the documentation is really poor on this matter, do I need to setup shared iPads how I normally would and when they log in, they would automatically pick up that teacher and student class already setup within ASM?

 

HEre's the doc, as you can see, it's not the best: https://learn.microsoft.com/en-us/mem/intune/fundamentals/education-settings-configure-ios.

 

Any ideas?

[Brimstone]

Hi,

 

Thanks for that.

 

Understood, so we have ASM setup with Intune already, that part I understand. However, I am lost HOW the classes that will be manually setup within ASM sync to iPads, within Intune it says something about certs for both students and staff but the documentation is really poor on this matter, do I need to setup shared iPads how I normally would and when they log in, they would automatically pick up that teacher and student class already setup within ASM?

 

HEre's the doc, as you can see, it's not the best: https://learn.microsoft.com/en-us/mem/intune/fundamentals/education-settings-configure-ios.

 

Any ideas?

 

As said previously InTune does not support Apple Classroom for new users, so you have bypass InTune and set them in ASM with teachers and students using a Managed Apple ID (BTW a Managed Apple ID is not designed for usage of users to constantly log into and out of an iPad)

 

Once classes are set up the teacher manually creates the classes and add students in that class using Apple Classroom..

 

https://support.apple.com/en-gb/guide/classroom/cla622d1f726/web

[adurrante]

As said previously InTune does not support Apple Classroom for new users, so you have bypass InTune and set them in ASM with teachers and students using a Managed Apple ID (BTW a Managed Apple ID is not designed for usage of users to constantly log into and out of an iPad)

 

Once classes are set up the teacher manually creates the classes and add students in that class using Apple Classroom..

 

https://support.apple.com/en-gb/guide/classroom/cla622d1f726/web

 

Hey! Yep, understand that. I think I'm more lacking of understanding from the Intune side of things, I get that we'd have to manually create the managed ID's within ASM that's fine. Is it a simple case of rolling out the Classroom app to teachers (I read that it isn't required on student iPads) then setup shared iPads as you normally would, then students would sign into the iPad using these managed ID's and the iPad will be self aware that they are apart of a class? I'm curious to see if I'm missing any steps.

[Brimstone]

Yes once the student has signed into the iPad with their Managed Apple ID then as long as the teacher is set for that class they can see they are there and add them. ASM does all the syncing on this info.