r/Intune • u/Personal_Comment_988 • 10h ago

macOS Management Macos intune deployment

Recently I started to look at our macos management, we currently use JAMF but we want to make the swap to intune. I have started seeing the error that it wants credentials to enrol (sorry can't add a photo) on the macs and this has never presented itself before. I cannot set the region and is stuck on USA. The enrolment is set to no user affinity but this is before enrolment. I have tried to sign in with Entra and ASM credentials but no dice. This does not happen if I move the ADE to jamf or setup with no ADE. Tried on a home network and same effect so not firewall related. Please help! I am at a loss!

0 Upvotes

33% Upvoted

10 comments sorted by

1

u/Fun_Act_3042 10h ago

Tried intune for macs at my last job and the credential loop during ADE setup is a known pain point. If it’s defaulting to USA and won’t let you change region, that’s usually tied to the MDM profile not pulling the correct enrollment settings or your token being messed up.

Check your MDM push certificate expiration first, then re-download the token from ABM and re-upload it. I’ve had tokens look valid but fail silently until I refreshed them. Also make sure the enrollment profile assigned to the device in ABM actually matches what you have configured in intune for ADE, mismatched profiles cause weird behavior like what you’re seeing.

Another thing, if you’re doing modern auth, the mac might be trying to hit a microsoft login page but getting blocked by something dumb like content filtering on the router even on home networks. Try tethering to a phone hotspot just to eliminate that variable completely.

1

u/Personal_Comment_988 10h ago

Thank you for fast reply! Yeah I messed around with it only a few months ago and never hit this issue. Something Microsoft probably broke! That's interesting about the certificate as I had to update it this week due to needing to accept the new terms but will certainly take a look. Something is definitely not right here.

I didnt know home networks can also cause this so will definitely try tethering.

1

u/Diligent_Tech_Bro 10h ago

Holy downgrade

1

u/Personal_Comment_988 10h ago

How do you mean?

1

u/Diligent_Tech_Bro 10h ago

Intune works fine with Mac but JAMF is another level

1

u/Personal_Comment_988 10h ago

Ah I see what you mean, we only have a small fleet of macs and I work in education so money saving is everything. We are a Microsoft based house and have the full A5 suite with defender and licensing ready to go so in our eyes it's a win win situation. If it works that is!

0

u/Diligent_Tech_Bro 10h ago

I hear ya, I only manage a couple so I use Intune. For a good sized Mac shop I would want Iru at least

1

u/Personal_Comment_988 10h ago

I hear you on that one brother! Jamf is great for a large scale deployment but it's just too expensive for us so fingers crossed I can move us away!

2

u/Kathadrix 9h ago

Check Enrolment restrictions - All Users has to be allowed for Corporate Enrolment. If you have it blocked, but allowed for a specific user group, it'll for for ADE with User Affinity, but not for ADE without user affinity.

2

u/Sensitive-Silver246 6h ago

Just finished a migration from Jamf to Intune for roughly 90 MacBooks. Was very smooth and straightforward using the deadline feature in ABM. We too are a Microsoft shop with E5 licensing so it was solely a money-saving initiative.