Issues with Intune and Apple Business manager

Question

I'm have experience with ABM and Endpoint manager just not as much as I need. Small MSP customer only has 12 iPads they want to manage. Have done this with 3rd part software a few years ago. I understand ABM and howe to setup users, devices with Apple configurator. Setting up the push tokens, MSM setup, Vpp and so on. Contacted Apple Support and verified all I have in ABM is correct and working. So here isa my issue. I have spent a week trying to get devices to either sync or check in in Intune. All tokens, certs are working and connected as per Intune. continuously can sync. It shows sync complete, but the device says never connected.

Finally, got every iPad to connect and was on my last one. Logged into ABM and needed to accept the new terms of service since iOS 18 was being pushed out. 10 min. later my MDM error said it was assigned to an external MDN. I research the error and find sometimes this happens when you need to accept change in terms of service. Need to refresh token so in ABM downloaded a new token and uploaded it. Error was gone in a few minutes. Hour later I had an error for my VPP Token,

Called ABM support again, after an hour they couldn't find a reason for this. Recommend I erase and delete everything and start over.

Sorry for being long winded but now my question is this. Has anyone had these issues? Is this an ongoing problem between Intune and ABM?

After all of this I've gotten to understand and know ABM and enrollment process in Intune I just do not want to have to constantly have issues.

Or is it that I'm not doing something Right?

Any Help is greatly appreciated!

Thank you in advance.

Accepted Answer

@Mike Mannella, Thanks for posting in Q&A. It sounds like you've been through quite a journey with setting up Intune and ABM for your customer's iPads. Based on the information I found, it seems that issues with syncing and checking in devices between Intune and ABM are caused that Apple needs to update something and then break the existing devices to make sure that you are on the latest setup/agreement.

Meanwhile, for iOS devices may show as "Not Contacted" in Intune. This status indicates that the devices haven't been enrolled in Intune yet. Another issue is related to switching MDM servers, which often requires a factory reset of the devices to ensure they are properly enrolled in Intune

For VPP tokens, they are used to assign and manage licenses purchased using Apple Business Manager. In general, if the VPP token is active, most time it will work well without any issue.

https://learn.microsoft.com/en-us/mem/intune/apps/vpp-apps-ios

Meanwhile, to ensure you manage iOS in Intune correct.ly, you can read the related links in the following link:

https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-platform-ios-ipados

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer

Thanks Crystal. I know pretty much all your saying. I thank you for the article. It explain all I need.

Thanks again.

Share via

Issues with Intune and Apple Business manager

1 additional answer

Your answer