MacOS Enrollment to ABM and MDM
IMPORTANT!!
Tips Before Starting:
Follow instructions very carefully. There are many points in the set-up process that will require you to go back to step 1 if you execute incorrectly.
Import the device into ABM portal and Intune
Open the application Apple Configurator on my iPhone. Log into the application you’re your ABM Admin account.
Tap on the Allow for the popup to allow “Configurator” to find Bluetooth devices.
The application will now require you to scan a QR code.
If you have not already, turn on the MacBook. You should be at the start of the OOBE experience where you select the language. Select English and the next screen should be to select your country or region.
Wait until the QR code is displayed. Scan the device with the app, it will import the device into the ABM portal. If you pass the screen that prompts to select your country or region, reboot the device. The QR code screen is the third screen you will face.
IMPORTANT:
Ensure that the screen states that the mac has been added to “Nelson Brothers, Inc”. If it does not or errors out you will need to remove the device from any enrollment and restart the setup from step 1.
Shut Down the MacBook and go into the ABM console: business.apple.com
Note: If you select restart or do not complete the steps in order following this step you will need to remove the device from any enrollment and restart the setup from step 1
Note: Ensure that the device is in ABM by referencing the serial number on the device.
When the device is first enrolled through the Configurator app the MDM will be “Devices Added by Apple Configurator 2”.
Change the MDM server to Intune MDM
You can do this by clicking on “Edit the MDM server” once you selected the device.
Log into the Intune portal and navigate to Devices > Enrollment > Apple > Enrollement Program Tokens
Select Intune MDM > Profiles > macOS Enrollment Profile
Select Assigned devices and ensure that your device is listed in the Assigned devices list. Since the device is currently offline and setup is not fully completed, it will not yet show as enrolled and will show as “not contacted”
Here you can see the test device I am using. If your device is not listed, you might want to click on the Sync button. It will sync the devices provisioned from ABM to Intune.
The device is now registered in Azure AD and imported on Intune through the ABM portal.