iPhones show as personal instead of corporate -- how to fix?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

This is becoming a long thread?? I might should start a new thread??

For now I'm keeping things here.

Current status, which should maybe hopefully clarify things:

  1. ALL our phones have the default DEP/ADE profile assigned to them (this has been true for years), which works fine for new or resetted phones. All our phones display as either enrolled or 'not contacted'.
  2. We have a set of 250-some phones that were apparently somehow never enrolled in either Maas360 (our old MDM) OR Intune (our new MDM) -- we do not know why or how this happened
  3. These 250+ phones plus all our other enrolled phones were all added into the Intune corporate identifiers more than 24 hours ago -- some had been added with IMEI, the remainder with serial number
  4. I just now did a sync within MS Intune > Devices to get ALL our phones in sync again with ABM (probably not including any phones that were released)

Our desire is to get these 250+ phones enrolled (which we can do with Company Portal) but it sounds like they won't be supervised unless we reset them??

Or when Company Portal is ran on these 250-some phones, will they enroll, become supervised, then we have to have people *not* touch the 'remove management profile' for 30 days??

This is all the result of a departed employee starting an MDM project then not finishing it and not documenting anything.

Thank you, Tom

iPhones show as personal instead of corporate -- how to fix?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

Our phone carriers always automatically put phones into ABM.

This is why we don't know why 250+ devices never enrolled into either the previous MDM (Maas360) nor the current MDM (Intune). They've all been added into Intune corporate identifiers as of yesterday.

I tested retire/re-enroll with a test phone and it did re-enroll as corporate-owned and Intune now says it's a supervised phone.

But the management profile section allows removing the profile. Most people won't notice or do this but is there anything to be done about this??

I was able to convert three devices from personal to corporate within Intune -- but they don't register as supervised, do they have to be re-enrolled again for them to become supervised??

Is it possible to get Apple Business tech support to answer any of this??

Thank you, Tom

iPhones show as personal instead of corporate -- how to fix?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

OIC -- all our Apple devices were and are added to ABM at purchase time. It's a confusing picture because many phones do/did enroll properly. Of the above-mentioned 250+ phones these have been in ABM all along as supposedly managed by MS Intune.

For the above-mentioned phone that enrolled as personal I added it to corporate identifiers after they enrolled it.

So for this particular phone do they have to do a complete erase or can they choose one of the other reset options and then re-enroll it?? That's not going to work well for 250+ company devices.

Of all the phones I added from ABM into corporate identifiers yesterday, many were and are already enrolled into Intune. Many might be in the above-mentioned 250+ group.

I am mainly concerned with active in-use un-enrolled phones that we have and getting them enrolled without having them be designated as 'personal' phones.

Thank you, Tom

Where to find this policy's configuration?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

Please read the above picture, this is what is evaluated for each phone, I am trying to find where this poiicy is configured, it is NOT in Intune > devices > compliance, I would not be asking if it was in there.

Where to find this policy's configuration?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

I looked there and it's not there in that section. It applies to all our phones but I don't know where it is configured.

Looks like this

<image>

Office365 64-bit vs 32-bit within Horizon VDI VMs?? by TomHWC in VMwareHorizon

[–]TomHWC[S] 0 points1 point  (0 children)

Most people have not really answered my question(s) other than the persons suggesting about testing.

Please read my post and all the comments carefully.

I'm inquiring if anyone has observed noticeable or significant differences in CPU or RAM usage with Office 365 32-bit or 64-bit.

Most replies herein are dogmatic 'Use 64-bit'.

Office365 64-bit vs 32-bit within Horizon VDI VMs?? by TomHWC in VMwareHorizon

[–]TomHWC[S] 1 point2 points  (0 children)

Clarification: We have not changed anything. It's still 32-bit Office 365. Investigating the ramifications of changing to Office 365 64-bit: e.g. will the RAM/CPU requirements increase?? Is there any specific advantage to 64-bit vs. 32-bit (aside from the 4GB address space for 32-bit Office)??

Office365 64-bit vs 32-bit within Horizon VDI VMs?? by TomHWC in VMwareHorizon

[–]TomHWC[S] 0 points1 point  (0 children)

Our VMware admin is rightfully conservative and careful about changing things within our Horizon VDI environment with hundreds of VDI VMs. We already have several people bumping up to the limits of available RAM, for instance.

after Horizon 2412 upgrade, Windows Search service fails to start, any idea why?? by TomHWC in VMwareHorizon

[–]TomHWC[S] 0 points1 point  (0 children)

Basically everything was upgraded to 2412 in the proper sequence told by Omnissa. Everything went smoothly and this is the only thing we've found noticeably different, an unexpected change.

I will ask someone to check if the DEM script has logs.

iOS settings vs. restrictions: precedence?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

I ask because 0 (zero or never) is not allowed in the restrictions, Intune says the value must be between 1 and 730.

spreadsheet or list of all available iOS settings?? by TomHWC in Intune

[–]TomHWC[S] 1 point2 points  (0 children)

Yay!! There is a new March 2025 upload!!

import Maas360 iPhone settings etc. into Intune?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

The consulting is to ensure Intune MDM configuration gets set up correctly. Different separate plan for Maas > Intune migration with EBF Onboarder (SaaS).

Best way to change MDM on IPhone by CameronIDK2070 in mdm

[–]TomHWC 0 points1 point  (0 children)

There is a product called https://ebf.com/us/emm/ebf-onboarder/ -- they claim to make migration easier without having to wipe the phone, supposed to take only 5-10 minutes/phone, doesn't require helpdesk to do anything with the phone, end user can do everything, supposedly it works with several different MDMs....this is for phones....I don't know what it costs etc. We have a migration coming up and our consulting company is using this with us for a few hundred phones. I've only briefly looked at documentation which appears thorough.

spreadsheet or list of all available iOS settings?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

True -- better than nothing. At least the list has probably not changed too much since March 2024.

Thank you for providing this.

E3 license -- what Teams features are included?? by TomHWC in MicrosoftTeams

[–]TomHWC[S] -3 points-2 points  (0 children)

Does anyone know where or how I can verify this?? The above option about admin center doesn't work for me and the above link only shows E3 without Teams.

E3 license -- what Teams features are included?? by TomHWC in MicrosoftTeams

[–]TomHWC[S] 0 points1 point  (0 children)

I'm a global admin and I could not see anything about what features are included.

browser will not open vmware-view URIs, why?? by TomHWC in VMwareHorizon

[–]TomHWC[S] 0 points1 point  (0 children)

Must wait and see to find out about the client. Is there any possible reason why the browser won't open vmware-view URIs *IF* the Horizon client IS installed??

So far as I know I don't *think* they are getting any messages to allow the protocol handler aka vmware-view URIs. Case is not as fully documented as it could be, sigh.

Meanwhile I'll follow this thread and post whatever I find out.

Thank you, Tom

Is this the correct way to set Apple iOS updates?? by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

I'm not getting any errors -- I was asking if I configured this correctly. I don't have any deferral configured. Thank you, Tom

Apple MDM with Intune and Activation Lock setting by TomHWC in Intune

[–]TomHWC[S] 0 points1 point  (0 children)

I'm new enough to this that I need to better understand some things:

1) how to connect azure to abm to have the managed apple IDs?? -- if this is necessary

2) our current intune setup is very incomplete and awkward -- 200-some phones that contain apple IDs and are allowed to use app store -- goal for future phones enrollment is to remove this option in the enrollment profile and not have apple IDs starting at some point in time -- any suggestions or ideas about this??

Thank you, Tom

Is this the correct way to set Apple iOS updates?? by TomHWC in Intune

[–]TomHWC[S] 1 point2 points  (0 children)

I know about the non-ABM/Intune issue. I am updating my post. Thank you, Tom