Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Table of Contents
minLevel1
maxLevel6
outlinefalse
stylenone
typelist
printablefalse

Prerequisites

o   Devices able to reach the current supported MacOS are recommended

o   Devices using third-party tools to bypass Apple’s MacOS compatibility standards may not be supported and/or incur issues during regular MacOS update releases

  • The current account must be an administrator

  • Device is unbound from Active Directory

  • Enrollment completed by the Primary User of the device

o   For shared devices, select 1 person to complete the enrollment

1. Device Enrollment

Note: Enrollment can take up to 1 hour to finalizing syncing and installing all settings and required applications. Please ensure you allocate enough time for the process to finish.

...

Once completed, a new personal recovery key will be issued. There is no need to write this down as there is a self-service option to get the key, as well as Intune Support Admins can receive this from the portal.

Company Portal and Self-Service options

The Intune Company Portal app allows device users to perform various self-service functions such as, device syncing and compliance through check status, and installing available applications. The Company Portal app will automatically install upon enrollment.

...

Upon launching the Company Portal app, you will be prompted to Sign In with your University of Waterloo credentials, along with applicable DUO authentication requests.

...

You will then see a list of devices that are associated with your UofW ID in Intune.

...

Note: Not all UofW managed devices are currently enrolled in Intune. In addition, you may see more devices than your primary assigned device. Please submit an Information Systems and Technology - Jira Service Management (atlassian.net) ticket to have devices unassigned.

Check Status

In the Company Portal app, clicking on the ellipsis then selecting Check status will sync the Mac with Intune, prompting the device to check its compliance status, download any missing profiles, apply policies, and/or required applications

...

If the device’s status is listed as Not in compliance, there are pending requirements that still need to be met on the device. These can include enabling FileVault and/or updating your Mac password.

...

If your Mac continues to be Not in compliance, please submit an Information Systems and Technology - Jira Service Management (atlassian.net) ticket.

Available Applications

The Company Portal app allows users to download and install a curated list of applications.

In the Company Portal app, click on the Apps tab, then select your desired application, and click Install.

...

Application install timing may vary based on application size, Intune server load, bandwidth, routing, and/or device specs.

FileVault Recovery Key

The FileVault recovery key is required to decrypt your data in the event that you are locked out of your device. You can a retrieve this from the Microsoft Intune Web Company Portal by selecting the device and clicking on Get recovery key. If you are unable to access the site, an Intune admin can receive the key from the portal. Please submit an Information Systems and Technology - Jira Service Management (atlassian.net) ticket for assistance.

...

Devices that have not allowed Intune to manage the key, cannot have their FileVault key accessed in this fashion.

In the event that neither the FileVault key or account password are usable, the device may be required to be completely wiped and re-imaged. Use Disk Utility to erase a Mac with Apple silicon - Apple Support Use Disk Utility to erase an Intel-based Mac - Apple Support

Questions/Feedback

Mac Enrollment Feedback form

Email - Feedback, Questions or Help

Related articles

Filter by label (Content by label)
showLabelsfalse
max5
spacesISTKB
maxCheckboxfalse
showSpacefalse
sortmodified
typepage
reversetrue
labelswatiam password change
cqllabel in ( "workstation-support" , "mac" , "maangement" , "set-up" ) and type = "page" and space = "ISTKB"

...