UDM: Enrolling an iOS device step by step

To be able to demonstrate Unified Device Management scenarios we recently added some new mobile devices to our demo environment. Amongst these devices are also iPads and iPhones which we had to enroll. The integration between Windows Intune and System Center 2012 R2 Configuration Manager was done earlier on.

Over-the-air enrollment of iOS devices is a rather straightforward process. In this blog post we will outline the step by step procedure to enroll an iPhone.

 

Enrollment

Time to fire up our iPhone 3GS and get started:

IMG_0003

First you need the get the Windows Intune Company Portal app from the App Store. Be aware that this app can only be installed on devices that are running iOS 6 or a later version.

 

IMG_0006

As soon as the Company Portal app is opened you will have to provide your user credentials and tap Sign In. We have ADFS implemented in our demo environment so we provide our AD credentials.

 

IMG_0007

So far so good – but at this point our device is not enrolled yet. The notification icon in the top right corner, and the blue ‘i’ icon on the device name indicate there are still further actions to be taken. Tap the icon at the top or the device name at the bottom.

 

IMG_0009

Tap Add this device.

 

IMG_0010

Tap Add in the top right corner.

 

IMG_0011

The device is being enrolled. This may take a minute.

 

IMG_0012

Tap the install button to install the management profile.

 

IMG_0013

A notification is displayed. Confirm by tapping Install Now.

 

IMG_0014

Tap Install in the top right corner.

 

IMG_0015

Profile installed successfully. Tap Done in the top right corner.

 

IMG_0016

And that is all there is to it!

 

image

The device then also becomes visible in the ConfigMgr console. Our ConfigMgr administrators are now able to manage this device.

 

Troubleshooting

 

If you encounter any problems during the enrollment process you can shake the iOS device to get a diagnostics screen. Make sure the Company Portal app is running when you start shaking.

IMG_0025

A diagnostics dialog box is shown where you can open up the log file for further analysis or email it.

 

Removing the profile

 

The management profile can be removed afterwards as well.  This is the out-of-the-box behavior. We can block the user from doing this but that is a subject for a future blog post.

 

IMG_0020

To remove the management profile go to Settings > General > Profile – Management Profile.

 

I hope you found this information helpful.

Until next time!

Tim

Advertisements
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: