Microsoft Intune Manage Mac

-->

Before setting up Microsoft Intune, review the supported operating systems and browsers.

Microsoft Intune announces support for macOS FileVault disk encryption management. Microsoft Intune is excited to announce support for FileVault full-disk encryption configuration on macOS devices. FileVault full-disk encryption (also known as FileVault 2) helps prevent unauthorized access to the information on macOS startup disks. Use Intune to configure FileVault disk encryption on devices that run macOS. Then, use the Intune encryption report to view encryption details for those devices and to manage recovery keys for FileVault encrypted devices. User-approved device enrollment is required for FileVault to work on the device.

For help installing Intune on your device, see using managed devices to get work done and Intune network bandwidth usage.

For more information on configuration service provider support, visit the Configuration service provider reference.

Note

Intune now requires Android 5.x (Lollipop) or higher for applications and devices to access company resources via the Company Portal app for Android and the Intune App SDK for Android. This requirement does NOT apply to Polycom Android-based Teams devices running 4.4. These devices will continue to be supported.

Intune supported operating systems

You can manage devices running the following operating systems:

Apple

  • Apple iOS 11.0 and later
  • Apple iPadOS 13.0 and later
  • Mac OS X 10.12 and later

Google

  • Android 5.0 and later (including Samsung KNOX Standard 2.4 and higher: requirements)
  • Android enterprise: requirements

Microsoft

  • Surface Hub

  • Windows 10 (Home, S, Pro, Education, and Enterprise versions)

  • Windows 10 Enterprise 2019 LTSC

    For more information about managing devices running Windows 10 2019 LTSC, see What's new in Windows 10 Enterprise 2019 LTSC

  • Windows 10 Mobile

  • Windows 10 IoT Enterprise (x86, x64)

  • Windows 10 IoT Mobile Enterprise

  • Windows Holographic for Business

    For more information about managing devices running Windows Holographic for Business, see Window Holographic for Business support.

  • Windows 10 Teams (Surface Hub)

    For more information about managing devices running Windows 10 Teams, see Manage Surface Hub with MDM

  • Windows 10 1709 (RS3) and later, Windows Phone 8.1, Windows 8.1 RT, PCs running Windows 8.1 (Sustaining mode)

Note

Not all Windows Editions support all available operating system features being configured through MDM. See the Windows configuration service provider reference docs. Each CSP highlights which Windows Editions are supported.

Customers with Enterprise Management + Security (EMS) can also use Azure Active Directory (Azure AD) to register Windows 10 devices.

For guidelines on using Windows 10 virtual machines with Intune, see Using Windows 10 virtual machines.

Intune And Mac

Supported Samsung Knox Standard devices

To avoid Knox activation errors that prevent MDM enrollment, the Company Portal app only attempts Samsung Knox activation during MDM enrollment if the device appears in the list of supported Knox devices. Devices that don't support Samsung Knox activation enroll as standard Android devices. A Samsung device might have some model numbers that support Knox, while others don't. Verify Knox compatibility with your device reseller before you buy and deploy Samsung devices.

Note

Enrolling Samsung Knox devices may require you to enable access to Samsung servers.

The following list of Samsung device models do not support Knox. They are enrolled as native Android devices by the Company Portal app for Android:

Device NameDevice Model Numbers
Galaxy AvantSM-G386T
Galaxy Core 2/Core 2 DuosSM-G355H
SM-G355M
Galaxy Core LiteSM-G3588V
Galaxy Core PrimeSM-G360H
Galaxy Core LTESM-G386F
SM-G386W
Galaxy GrandGT-I9082L
GT-I9082
GT-I9080L
Galaxy Grand 3SM-G7200
Galaxy Grand NeoGT-I9060I
Galaxy Grand Prime Value EditionSM-G531H
Galaxy J MaxSM-T285YD
Galaxy J1SM-J100H
SM-J100M
SM-J100ML
Galaxy J1 AceSM-J110F
SM-J110H
Galaxy J1 MiniSM-J105M
Galaxy J2/J2 ProSM-J200H
SM-J210F
Galaxy J3SM-J320F
SM-J320FN
SM-J320H
SM-J320M
Galaxy K ZoomSM-C115
Galaxy LightSGH-T399N
Galaxy Note 3SM-N9002
SM-N9009
Galaxy Note 7/Note 7 DuosSM-N930S
SM-N9300
SM-N930F
SM-N930T
SM-N9300
SM-N930F
SM-N930S
SM-N930T
Galaxy Note 10.1 3GSM-P602
Galaxy S2 PlusGT-I9105P
Galaxy S3 MiniSM-G730A
SM-G730V
Galaxy S3 NeoGT-I9300
GT-I9300I
Galaxy S4SM-S975L
Galaxy S4 NeoSM-G318ML
Galaxy S5SM-G9006W
Galaxy S6 Edge404SC
Galaxy Tab A 7.0'SM-T280
SM-T285
Galaxy Tab 3 7'/Tab 3 Lite 7'SM-T116
SM-T210
SM-T211
Galaxy Tab 3 8.0'SM-T311
Galaxy Tab 3 10.1'GT-P5200
GT-P5210
GT-P5220
Galaxy Trend 2 LiteSM-G318H
Galaxy V PlusSM-G318HZ
Galaxy Young 2 DuosSM-G130BU

Windows PC software client

An Intune software client can be deployed and installed on Windows PCs as an alternate enrollment method. This functionality is only available using the Intune classic portal. You can use the Intune software client to manage 10 and later PCs with the exception of Windows 10 Home edition.

Note

Microsoft announced that Windows 7 support ends on January 14th 2020. On this date, Intune also retires support for devices running Windows 7.

For more information, see Intune plan for change: end of support for Windows 7.

Microsoft Intune will retire support for the Silverlight-based Intune console on October 15, 2020. This retirement includes ending support for the Silverlight console configured PC software client (also known as the PC agent).

For more information, see Microsoft Intune ending support for the Silverlight-based admin console.

2020-4-2  How to Find an Office Product Key. This wikiHow teaches you how to locate the product key for your version of Microsoft Office. Search your personal emails and documents. Newer versions of Office don't save the full 25-digit product key in. 2020-4-1  How to find your Office Product Key after installation on computer. Here in this article will show you how to find out your Office product key from your computer after installation. Before doing a clean install of Windows, or upgrading to Windows 10 from Windows 7/8/8.1, it is a good idea to find out and save your office product key to a safe location. This article is for Office for Mac 2011. Are you using Office on PC? See Using product keys with Office 365, Office 2016, or Office 2013. Where do I find my Office for Mac 2011 product key? Once you have your product key, see Activate Office for Mac 2011. When you install or reinstall Microsoft Office, you are prompted to enter the product key. Find microsoft office product key on computer mac. Microsoft Office 2016 is one of the leading word processors in the world. However, most average users cannot afford the software. Luckily, you can find a free genuine Microsoft Office 2016 product key online.

Intune supported web browsers

Different administrative tasks require that you use one of the following administrative websites.

The following browsers are supported for these portals:

  • Microsoft Edge (latest version)
  • Microsoft Internet Explorer 11
  • Safari (latest version, Mac only)
  • Chrome (latest version)
  • Firefox (latest version)

Intune classic portal

The Intune classic portal is only used for managing devices enrolled with the Intune PC software client (https://manage.microsoft.com). The Intune classic portal requires Silverlight browser support.

The following Silverlight browsers support the Intune console:

  • Internet Explorer 10 or later
  • Google Chrome (versions prior to version 42)
  • Mozilla Firefox with Silverlight enabled (versions prior to version 56)

Note

Microsoft Edge and mobile browsers are not supported for the Intune classic portal because they do not support Microsoft Silverlight.

Only users with service administrator permissions or tenant administrators with the global administrator role can sign in to this portal. To access the administration console, your account must have a license to use Intune and a sign-in status of Allowed.

Over the weekend, we achieved a significant milestone that I wanted to share with this community because you made it happen: Microsoft endpoint management (as I like to refer to System Center Configuration Manager and Microsoft Intune working together) is now managing more than 175 million Windows, Mac, A­­ndroid, and iOS devices.

175 million is an incredibly big number. The chart below provides a view of how fast this ramp has happened. I am not aware of any commercial cloud service that has ramped up this quickly. The only commercial customer cloud service that I believe is bigger than System Center Configuration Manager (ConfigMgr) and Intune together is Office 365.

To put a number like 175 million in perspective: your odds of winning the Powerball Lottery are about 175 million to one. When it comes to the lotto, anyone holding a ticket is on the wrong side of that math problem—the odds are just stacked completely against you. But with ConfigMgr, the value of that 175 million is flipped—now you are the beneficiary of that giant number because all the insight we gather from so many endpoints is constantly being used to improve the features and functionality of your product.

Let me provide a little more insight into the data

For the majority of the time being measured in the graph, ConfigMgr has dominated the growth and usage. If you looked at the mix of ConfigMgr-managed devices vs. Intune-managed devices a year ago, the mix would have been three to one. Over the last couple of months, however, that mix has flipped. In the last month, for example, for every ConfigMgr managed device that has hit the server, three Intune-managed devices have come in. Don’t get me wrong, we are definitely not forcing anyone to move from ConfigMgr to Intune, but what I’ve noticed from our customers is a shift towards full-cloud solutions with Intune—and this is represented in the data where we see Intune managing millions of Windows 10 devices. The reasoning behind this is simple: the market has concluded that Microsoft has built the best management tools for Windows.

To better understand our long-term commitment to ConfigMgr, as well as how it works with Intune moving forward, check out this quick section of last week’s Endpoint Zone episode:

What 175 million means for you

This milestone isn’t just about a big number; it’s about the way it impacts how you use the technology.

Right now, there’s a lot of talk in our community about “modern management” and how it impacts the work you’re doing now and how you’ll plan for the future of work. “Modern management” is not a product but a perspective about how to manage and secure devices, and this discussion sometimes leads to the conclusion that Intune is modern and ConfigMgr is not modern. In terms of how my team builds and operates these tools, as well as how we invest in and prioritize them, nothing could be further from the truth. “Modern management” is a way to go about managing your endpoints—a great example of this is the perspective that using Windows Autopilot for PC provisioning is a modern approach, whereas traditional imaging is not.

In my mind, the most significant element that makes a management tool “modern” is that insights and intelligence from the cloud are used to automate and improve that tool in ways that were not possible in the past.

For any organization to provide insights/intelligence that you can confidently rely on to automate and amplify your efforts, that provider first has to be operating a data set that is both rich and broad. Having something like this to learn from is not just important—it’s mandatory. These 175 million endpoints provide by far the largest and broadest data set available—and then add to this what we learn from over 800 million PCs in active use, over 180 million monthly active users of Office 365, and the 640 billion monthly authentications through Azure Active Directory. Once again, the math tells a compelling story.

This big number is also a safety net for the community of people responsible for endpoint management in companies all over the world. When it comes to managing Windows devices, for example, the things we learn from running a global service allows us to anticipate the emerging needs of a specific industry, or it shows us places where we can continue to refine useful features. The depth of these types of insights simply wouldn’t be possible if we were managing a global network of devices that was dramatically smaller. It takes tens of millions of Windows 10 endpoints to get the breadth necessary to provide the holistic insights you need, as the breadth of the PC ecosystem is enormous—an incredible diversity of hardware, drivers, peripherals, agents, apps, etc.

Microsoft Intune Manage Mac User

The things learned from this type of scale is at the core of every modern management ideal: ConfigMgr and Intune are constantly refined and improved by what is learned here, and the security and management of each endpoint improves accordingly.

Microsoft Intune Manage Machine

A couple of examples of how this benefits you

  • Automate compatibility testing—For nearly every IT team, the single largest cost and expenditure of time during an upgrade to a new version of Windows is compatibility testing. When we release Desktop Analytics soon, we will be able to automate your compatibility testing because of what we learn from the data sets noted above.
  • Zero Trust environments—The ongoing movement of data and apps to the cloud, as well as the constant use/growth of mobile devices, means that it is more important than ever to ensure only trusted users using trusted devices access your company’s apps/data. This is another area in which the size of our data sets can help you in ways that were not possible in the past—for example, human hands and human minds can no longer keep up with the speed and sophistication of many attacks. But now there’s intelligent assistance from the cloud.

There is so much more coming! We are learning and iterating quickly. Microsoft Ignite in November is going to be a really fun week as we will roll out a number of new modern management scenarios based on our learning from this incredible scale. If you have not registered—do it today!

Intune Manage Mac

Thank you for your willingness to partner with us, and for your trust in us and the tools we’re building. My team and I cannot express enough how sincerely we appreciate working with you. We are honored to partner with you as you work to deploy and manage your modern workplace.