UDM: Enrolling an iOS device step by step
To be able to demonstrate Unified Device Management scenarios we recently added some new mobile devices to our demo environment. Amongst these devices are also iPads and iPhones which we had to enroll. The integration between Windows Intune and System Center 2012 R2 Configuration Manager was done earlier on.
Over-the-air enrollment of iOS devices is a rather straightforward process. In this blog post we will outline the step by step procedure to enroll an iPhone.
Time to fire up our iPhone 3GS and get started:
First you need the get the Windows Intune Company Portal app from the App Store. Be aware that this app can only be installed on devices that are running iOS 6 or a later version.
As soon as the Company Portal app is opened you will have to provide your user credentials and tap Sign In. We have ADFS implemented in our demo environment so we provide our AD credentials.
So far so good – but at this point our device is not enrolled yet. The notification icon in the top right corner, and the blue ‘i’ icon on the device name indicate there are still further actions to be taken. Tap the icon at the top or the device name at the bottom.
Tap Add this device.
Tap Add in the top right corner.
The device is being enrolled. This may take a minute.
Tap the install button to install the management profile.
A notification is displayed. Confirm by tapping Install Now.
Tap Install in the top right corner.
Profile installed successfully. Tap Done in the top right corner.
And that is all there is to it!
The device then also becomes visible in the ConfigMgr console. Our ConfigMgr administrators are now able to manage this device.
If you encounter any problems during the enrollment process you can shake the iOS device to get a diagnostics screen. Make sure the Company Portal app is running when you start shaking.
A diagnostics dialog box is shown where you can open up the log file for further analysis or email it.
Removing the profile
The management profile can be removed afterwards as well. This is the out-of-the-box behavior. We can block the user from doing this but that is a subject for a future blog post.
To remove the management profile go to Settings > General > Profile – Management Profile.
I hope you found this information helpful.
Until next time!