Support for unsupervised ADE devices was deprecated in iOS/iPadOS 11. Intune supports configuring devices for supervised mode as part of ADE. So it's especially useful for corporate-owned devices. An iOS/iPadOS device in supervised mode provides more management control, like blocking of screen captures and blocking of the installation of apps from App Store.

What is supervised mode?Īpple introduced supervised mode in iOS/iPadOS 5.

If both are deployed, Intune will incorrectly prompt device users to sign in to Company Portal and download a management profile they've already installed. This configuration should not be deployed manually to users because it will cause a conflict with the configuration sent during the initial enrollment. Make sure the policy only targets those ADE devices without user affinity.ĭuring initial enrollment, Intune automatically pushes the app configuration policy settings for devices enrolled with Setup Assistant with modern authentication, configured in Configure the Company Portal app to support iOS and iPadOS devices enrolled with Automated Device Enrollment, when the enrollment profile setting Install Company Portal is set to yes. Then configure and deploy an app configuration policy. To stage a device, set up VPP deployment as described earlier in this section. If you don't enable automatic updates, the device user will need to manually check for them on their own.ĭevice staging is used to transition a device without user affinity, to a device with user affinity. See Upload an Apple VPP or Apple Business Manager location token for the steps to access your token settings. To enable automatic app updates for Company Portal, go to your app token settings in the admin center and change Automatic app updates to Yes. For information about how to sync, assign, and manage a VPP app, see assign a volume-purchased app.

Enable automatic app updates for Company Portal on ADE devices.ĭeploy the app as a required, VPP app with device licensing.Ensure all ADE devices, including already-enrolled ones, receive the app.We don't recommend using the App Store version of the Company Portal app because it isn't compatible with automated device enrollment and doesn't provide the automatic updates and availability like deployment does.ĭeploying the Intune Company Portal app through Intune is the best way to provide the app to users and the only way to:

Apple serial number authentication