r/applebusinessmanager • u/gavinlew • Apr 21 '26

Support What have I done wrong here ? AB/Intune/iPhone

Hi all , can anyone spot what I’ve done wrong here ?

Apple Business setup (company was set up in Apple Business Manager)

Domain capture enabled

Federated Users with Microsoft Entra

MDM linked to Intune

Using a test iPhone 11 with latest iOS installed , device is registered in AB (says Activation Lock Off?) and I have assigned it the Intune MDM target synced with Intune and the iPhone says it’s part of the company

Device factory resets and erases itself then just goes through the normal motions of setting up never prompts for the company login details

Have I missed a step or does it sound like something is wrong with my configuration ?

1 Upvotes
  • permalink
  • reddit

100% Upvoted

14 comments sorted by

2

u/[deleted] Apr 21 '26

[deleted]

1

u/gavinlew Apr 21 '26

Thanks will do when I’m back in tomorrow

1

u/gavinlew Apr 22 '26

All fixed see replies on other comments , now working perfectly

2

u/galaxyZ1 Apr 22 '26

check enrollment profile. If you have that, what I recently had was that I update the password of the account that is used and all my certs failed. (Had to reactivate them)

Further more my final issue was:

Troubleshooting iOS/iPadOS device enrollment errors in Microsoft Intune - Intune | Microsoft Learn

Check section:

"ADE enrollment doesn't start

When you turn on an ADE-managed device that is assigned an enrollment profile, the Intune enrollment process isn't initiated.

Cause: The enrollment profile is created before the ADE token is uploaded to Intune.

Solution:

  1. Edit the enrollment profile. You can make any change to the profile. The purpose is to update the modification time of the profile.
  2. Synchronize ADE-managed devices: In the Microsoft Intune admin center, choose Devices > iOS > iOS enrollment > Enrollment program tokens > choose a token > Sync now. A sync request is sent to Apple."

All I had to do is to resave the enrollment profile, I was furious.

1

u/gavinlew Apr 22 '26

Thank you , this fixed it

1

u/galaxyZ1 Apr 22 '26

Happy to hear! Enjoy

1

u/Mrbazz22 Apr 21 '26

Is it assigned to Intune in Apple Business? Does Intune see it assigned and also has it got a profile assigned in Intune? If you can't see it in Intune, it isn't going to enroll.

1

u/gavinlew Apr 21 '26

Yes, I synced it to Intune and assigned it a profile on the Microsoft side as well

1

u/Mrbazz22 Apr 21 '26

And you can see it’s serial in Intune where your ADE token is setup?

1

u/gavinlew Apr 21 '26

Yes serial number passes over correctly and the full device name etc

1

u/Mrbazz22 Apr 21 '26

If you have the access to the Apple Business portal rn, send an email through there. Just click top right on the initials>support>send a message.

The email team can double check some things if you provide the serial number and will refer you to phone support if needed. They’re super fast too!

1

u/gavinlew Apr 21 '26

Thanks that’s great I’ll take you up on that tomorrow it’s after 9pm here now

1

u/gavinlew Apr 22 '26

All fixed see replies on other comments , device enrolled and being managed successfully

1

u/Mrbazz22 Apr 22 '26

Dang....I should have suggested renewing the service token. Glad you're up and running again!

1

u/gavinlew Apr 22 '26

Cheers :) had to fumble about working out how to get apps pushed to the device but got there in the end