Intune - iPad Lockdown to one wireless SSID

[_techie_]

What setting do I need in Intune to lock iOS Devices to one WiFi network?

Cheers

Edited January 13, 2025 by ZeroHour

[CHiLL]

We used to do this and then stopped for a couple of reasons, though the exact details as a little hazy as this was some years ago.

 

Firstly, we specified the WiFi via a configuration profile and that worked. If you have other SSIDs, the iPads cannot join them unless the users know the password. However, if you have an open BYOD network, you cannot stop them from joining that WiFi unless you block all the MAC addresses in your WiFi management. However, this is an issue because MAC randomisation is on by default, which negates the effect of blocking MAC addresses. You can turn off MAC randomisation via Intune, however you cannot prevent the user from turning it back on in the iPad settings.

 

However, the biggest issue we faced was even before MAC randomisation was implemented - If the iPad drops off that WiFi network for whatever reason, forgets the password, configuration issue or some other issue - you cannot then rejoin the network and have to reset the iPad via DFU mode.