Brimstone

Can you try and sign out of the iPad completely from the settings menu?

This is totally at the door of Apple and has nothing to do with whether the reseller ordered iPads early enough, Apple gave resellers no warning whatsoever of the price increase and any items not shipped on the day of the increase announcement were subject to the price increase. On a related subject I have a customer who ordered a CTO Mac mini in April, this has not shipped from Apple yet and likely never will. If you want to complain contact customer services at Apple.

Hi there........ When you Federate your school domain in ASM to Entra it goes and looks at the accounts for anyone who is using that same domain for existing Apple services using a personal Apple account, they could be signed into their iPad, their iPhone or their Apple TV using what is a school owned domain, which has all sorts of security issues. In your case you have 142 members of staff using an unmanaged school domain based email address for personal use. Each one of those will get an email telling them they must change the email address being used to sign into these services, importantly they will not lose access to any paid for content. ASM syncs all of the user accounts and classes from Entra and automatically creates Apple Managed Account in ASM for you. This will ultimately depend on whether you intend to use Federated Authentication and Directory Syncing, take a read through the link.. https://support.apple.com/en-gb/guide/apple-school-manager/axm5e0af487c/1/web/1#axm5e8f8847d

Firstly, the MDM feature set for Apple Business is lacking in so many features when compared to Jamf School or Jamf Pro, Secondly as a school I very much doubt you have either of these to allow you to verify and enrol into Apple Business... DUNS Number Company Registration Number VAT Number

If you are all schools then I don't understand all the excitement, there are (at present) no plans for this to appear in Apple School Manager, Apple Business Manager only

The MDM elements of this will be very cut down in terms of MDM tools and only really designed for iPadOS, don't expect to be able to manage a huge fleet of macPS devices with this.

So you know nothing about Macs, did you get any technical training on Jamf or macOS? Sounds like your school just bought Macs without any in depth project managment or advice beforehand, if Jamf MDM was afterthought once you has these problems. How to configure SSO on macOS from Intune... https://www.intunemacadmins.com/complete-guide-macos-deployment/configure_macos_platform_sso/ Configure Adobe pkg's to macOS https://dazwallace.wordpress.com/2022/11/06/recommended-workflow-to-deploy-adobe-software-with-jamf-pro/ macOS has never worked with "mobile accounts" so don't even bother trying to configure these.; If you are using creative video, music and Adobe apps do not expect users to be able to work across a network drive, this will just cause problems. Users should be working locally on projects then saving them to either a local network share or OneDrive. Macs are neither scary or time consuming to manage when you have the right training and tools in place, I have institutions managing thousands of macs who spend less than a hour a week on them.

Meh....you have been able to relocate the sound library and share it with users for years....

It sounds like these were bought using Apple's old VPP system, where you used Apple VPP web site and a token for each licence, if you used redemption codes for apps and and they have been redeemed by end users these can not be moved or transferred. https://support.apple.com/en-gb/105125 You will need to migrate these apps into Apps and Books in Apple School Manager. https://support.apple.com/en-mide/101927

This can not be done this way, Securly uses a SmartPac file installed on each iPad with the users email address as part of the configuration file to identify them so Securly only operates correctly in a 1:1 iPad environment, unless you have iPad registers for each class.

1. Where have these apps been bought? Through the VPP store or direct using the MDM? You should be using the ASM VPP store for all apps then pushing them out via the MDM, what is your ASM account telling you about used apps, do you have enough paid for licences for all of the iPads? Many apps use an external subscription model now for paid for apps?

Is your APNS token up to date..? Is ASM up to date...?

Have a read here....https://support.apple.com/en-gb/guide/logicpro/lgcpac5affb8/mac

Is macOS up to date?

Are these MDM Managed Apps..?

This is in the " Managed Login Items" payload in the configuration profile?

What Music apps are being used as many of them will not work if directly using them with a networked home share

All content should be cached, are the managed devices on a separate VLAN or network?

You won't be able to do this as Siri requests are all on device only........

I'd like to able to tell you that managing macOS via Intune is a breeze, but I would not touch Intune for macOS with the worlds longest bargepole, it's so full of holes in terms of management, configuration management, patching...I could go on.

Whilst you may have been able to do this in the past Lightspeed support explicitly say this is now not allowed, my customer is tearing his hair out at this decision

I assume you been through all of these..? https://learn.microsoft.com/en-us/entra/identity-platform/apple-sso-plugin https://support.apple.com/en-gb/guide/deployment/dep7bbb05313/web https://support.apple.com/en-gb/guide/deployment/depfd9cdf845/1/web/1.0 https://support.apple.com/en-gb/guide/deployment/depe6a1cda64/web

It says in the link....So the device must have an MDM configuration payload for SSO Configuration must be pushed to the device to enable the Enterprise SSO plug-in. Apple requires this security constraint.

The simple answer is it doesn't have anything to do with Apple's Automated Device Enrolment, you enroll devices with the correct url's, a user picks up an iPad and taps onto a MS Application and Authenticator then signs them in?

Both personal and work...