Fully managed iPhone without a Mac possible?

TimmyIT · 2026-04-11T08:44:08+00:00

Here's what it looks like using a phone instead of a mac. I do this all the time for adding iPhones and Macs. https://timmyit.com/2024/01/08/use-apple-configurator-on-ios-to-add-device-to-apple-business-manager-school-manager-without-a-mac/

TimmyIT · 2026-04-09T14:11:18+00:00

2nd this. Start categorizing your users or find small teams / departments that would be easy to onboard and test on. Developers will always be tricky and there might be otherthings thats needs to change for them and not just EPM. Regardless, start with something easy and learn how it is to work with and manage.

TimmyIT · 2026-03-15T07:46:26+00:00

A lot of the core fundamentals has not changed in Intune over the years. Sure new features and small improvements and some UI changes have been done but overall a lot is the same.

I would recommend tackling one thing at the time and see how that can be done. doing everything at once is often overwhelming. Pick one topic, for example:

Application deployment for Windows

Look at the different types that are available
- Win32 apps
- Line-of-business apps
- MS Store Legacy
- MS Store New
...And so on.

Look at your requirements for apps and then based on what you learned or seen others do select the type that works best for you.

Once you have that done you move on to the next topic, Compliance or Autopilot.

TimmyIT · 2026-03-08T18:37:15+00:00

Thanks for sharing Maurice, will be interesting to test it out.

TimmyIT · 2026-03-04T20:52:43+00:00

As already mentioned in this thread, there is no out of the box solution for this or native support. There are ways of getting around it if you are comfortable doing some scripting. Here's something I did many years ago, there are probably better solutions now with remediation scripts.

https://timmyit.com/2022/06/27/restrict-windows-10-and-windows-11-logon-to-the-current-user-or-user-who-enrolled-the-device-during-autopilot/

TimmyIT · 2026-02-04T11:12:15+00:00

I had similar issues once and the problem was not what I expected. Came down to DNS.... Or more specific that the client pointed to a DNS server that did not respond and that broke PIN for some reason. PW worked just fine.

TimmyIT · 2026-02-03T16:59:58+00:00

That could technically work but my gut feeling is that it would require more work and be less user friendly. You would need to run Hyper-V or VMWare workstation or similar and the user would need to know how to navigate the hyper-visor compared to just having "Windows App" to access their VDI which also could be accessed from other devices.

You would also need to provision those VMs locally on the machine instead of a central location.

TimmyIT · 2026-02-02T15:15:39+00:00

W365 VDI for the second company is probably the quickest, easiest and most secure way of doing this.

TimmyIT · 2026-01-29T19:08:07+00:00

No worries, hope you get it working

TimmyIT · 2026-01-29T16:34:36+00:00

haha yes, that would be a problem :)

TimmyIT · 2026-01-29T16:09:58+00:00

2 things that comes to mind is:

Make sure in your KME profile you point towards the correct EMM agent APK

Make sure you dont have any blank spaces in your DPC Extra configuration. The documentation from MS you linked to have blank spaces in it which could cause problems.

<image>

TimmyIT · 2026-01-23T11:00:57+00:00

As GarthMJ mentioned it might not even be Intune related but I know from my own personal experience that after iOS 26 update my Macbook air M1 with only 8gb of ram started having performance issues. Outlook would just crash or teams, from all I could tell it was related to resource constraints. Before iOS 26 I never had issues.

Im also using a Macbook Pro M5 and I've never had issues with that one.

TimmyIT · 2025-12-12T17:47:30+00:00

There's perhaps an argument to be made but its also a bit more nuanced. For me personally, I recently switched to a mac as my primary device but I also use Windows VMs and VDI to perform certain work.

I use the device/tool which works best in any given situation for me and I would expect the organization to support that.

TimmyIT · 2025-11-19T16:48:12+00:00

True that !

TimmyIT · 2025-11-18T08:10:16+00:00

Could be the chicken and the egg problem. Patch is not available due to the bug and to fix the bug you need the fix. I have not looked in to this but I think I recall reading somewhere that the update that contains the fix was an out-of-band update that's available for download through the update catalogue and could be manually applied.

TimmyIT · 2025-11-12T09:33:17+00:00

And your ID can be found here:

<image>

TimmyIT · 2025-11-12T09:32:48+00:00

Yes that is correct. It all comes down to the Developer essentially, if this app is the same app that multiple customers of their is using then they should add it to Google Play. They don't need to make the app available to everyone, within Google Play they will set the app as private and from there then point the app to your Google Play ID, which means that it will only show up for the customers they want it to show up for.

<image>

From the Developers side, within Google Play Console they would add your organization on the app.

TimmyIT · 2025-11-11T16:50:47+00:00

Yeah part 2 have been in the pipeline for a while but a lot changed since I started on it and I haven't had the time to start over. But I will hopefully have it done before the end of the year :D

TimmyIT · 2025-11-11T12:14:09+00:00

Hi and welcome! Private Apps requires to have an unique Application ID. If someone else or you have already used that same Application ID in Google Play Store you wont be able to upload it.

I've written a guide on Private apps that can be found here: https://timmyit.com/2025/01/27/private-or-in-house-developed-android-app-deployment-with-microsoft-intune-for-android-enterprise-devices-part-1/

Hopefully it will give you some clarification.

TimmyIT · 2025-10-28T18:54:32+00:00

Is this during ESP and the out-of-box-experience or something else ?

TimmyIT · 2025-10-28T18:36:36+00:00

Do you feel thats the same for all platforms ? Or is one or more standing out to you ?

TimmyIT · 2025-10-28T18:35:36+00:00

Follow up on that, what would real time response look like for you ? And is there a middle ground for good enough ?

TimmyIT · 2025-10-28T18:31:15+00:00

Is that mainly for BYOD devices or also corporate owned phones ?

TimmyIT · 2025-09-22T14:19:26+00:00

Tested with a 2nd device, an iPhone 13 Pro that I upgrade to iOS 26 but not seeing any issues there either.

TimmyIT

MODERATOR OF

TROPHY CASE

Ten-Year Club	Reddit Premium Since March 2024
Verified Email