macOS enrollment guide
Intune · Official Microsoft guidanceCheck overdue
Observed content change
May need admin actionCheck whether new requirements apply to your setup; check whether a default changed for your tenant or devices; check the dates against your plans.
Changed article references · 1 added · 2 removed
- Removed link: add the Company Portal app
../../app-management/deployment/add-company-portal-macos - Removed link: installs using the option
../../app-management/deployment/add-company-portal-macos - Added link: Retirement of Setup Assistant (legacy)
ref-automated-authentication-methods#option-4-setup-assistant-legacy
[removed: Decide how you want users to authenticate on their devices:][added: For ADE with user affinity, use] Setup Assistant with modern[removed: authentication (recommended),][added: authentication. Users sign in to] the Company Portal[removed: app, or Setup Assistant (legacy) (not recommended). Make this decision before you create the][added: app after] enrollment[removed: policy. Using the Setup Assistant with modern authentication is considered modern authentication.][added: to complete] Microsoft[removed: recommends using Setup Assistant with modern authentication. For all organization-owned macOS devices, Setup Assistant (legacy) is always and automatically used, even if you don't see]… [added: Entra registration.] Select the Setup Assistant with modern … use organizational resources, including LOB apps.[removed: Select the Setup Assistant (legacy) when you can't use Setup Assistant with modern authentication and: You want to wipe the device. You don't want to]…
Before: Decide how you want users to authenticate on their devices: Setup Assistant with modern authentication (recommended), the Company Portal app, or Setup Assistant (legacy) (not recommended). Make this decision before you create the enrollment policy. Using the Setup Assistant with modern authentication is considered modern authentication. Microsoft recommends using Setup Assistant with modern authentication. For all organization-owned macOS devices, Setup Assistant (legacy) is always and automatically used, even if you don't see … Select the Setup Assistant with modern … use organizational resources, including LOB apps. Select the Setup Assistant (legacy) when you can't use Setup Assistant with modern authentication and: You want to wipe the device. You don't want to …
After: For ADE with user affinity, use Setup Assistant with modern authentication. Users sign in to the Company Portal app after enrollment to complete Microsoft … Entra registration. Select the Setup Assistant with modern … use organizational resources, including LOB apps. …
… Microsoft Intune admin center, go to[removed: Apple Configurator enrollment][added: Devices > Enrollment > macOS > Enrollment program tokens, select a token,] and create an enrollment policy. Choose … Enroll without user affinity: Setup Assistant[removed: authenticates the user, and]enrolls the[removed: user][added: device] in[removed: Intune.][added: Intune without associating it with a user.] Also choose if users can delete …
Before: … Microsoft Intune admin center, go to Apple Configurator enrollment and create an enrollment policy. Choose … Enroll without user affinity: Setup Assistant authenticates the user, and enrolls the user in Intune. Also choose if users can delete …
After: … Microsoft Intune admin center, go to Devices > Enrollment > macOS > Enrollment program tokens, select a token, and create an enrollment policy. Choose … Enroll without user affinity: Setup Assistant enrolls the device in Intune without associating it with a user. Also choose if users can delete …
[added: Important Intune has ended support for Setup Assistant (legacy) authentication for ADE with user affinity with the October 2026 (2610) service release. Existing profiles that] …
Before: No saved wording on this side.
After: Important Intune has ended support for Setup Assistant (legacy) authentication for ADE with user affinity with the October 2026 (2610) service release. Existing profiles that …
[removed: Enroll with user affinity + Setup Assistant (legacy): When the device is turned on, the Apple Setup Assistant runs. Users enter their Apple ID ([email protected]]…
Before: Enroll with user affinity + Setup Assistant (legacy): When the device is turned on, the Apple Setup Assistant runs. Users enter their Apple ID ([email protected] …
After: No saved wording on this side.
Short quotes: Microsoft source · © Microsoft.
Read the current Microsoft source · Link to this observation · Compare any two versions
Observation details
- Observed by ChangeIntel
- 30 Oct 01:33 UTC
- Source update metadata
- 29 Oct 22:34 UTC
- First observed on this installation
- 8 Oct 23:14 UTC
- Last successful check
- 14 Nov 20:55 UTC
- Next check due
- today 02:55 UTC
Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment. Article references show literal targets and labels, including relative addresses; image bytes are not captured or compared.