Microsoft Intune – Enrollment – How to enroll a macOS Device using an Apple Configurator enrollment profile (.mobileconfig)

Self-Help Article (External)

Purpose

This article outlines the process for enrolling a macOS device into Microsoft Intune using an Intune enrollment profile (.mobileconfig). This method is intended for user-driven enrollment scenarios and allows devices to be enrolled directly on the device without requiring Apple Configurator app.

Requirements

Step-by-Step Procedures

1. Intune: Review or Create Apple Configurator Enrollment Profile
   A device enrollment policy defines the settings applied during enrollment. These settings are applied only once.
   1. In the Microsoft Intune admin center, go to Devices > Enrollment.
   2. Select the Apple tab
   3. Under Bulk Enrollment Methods, select Apple Configurator
   4. Select Profiles
   5. Review profiles or create new profile
      1. If a profile already exists:
         1. Skip to Step 2
      2. If a new profile is required:
         1. Select Create Profile
         2. Enter Name and Description (optional)
         3. Select Next 
         4. For User Affinity, choose whether devices with this profile must enroll with or without an assigned user.
            1. Enroll without User Affinity: Use for shared or task-based devices.
            2. Enroll with User Affinity: Use for user-assigned devices.
         5. Select Create
2. Intune: Export Enrollment Profile
   1. In the Microsoft Intune admin center, go to Devices > Enrollment.
   2. Select the Apple tab
   3. Under Bulk Enrollment Methods, select Apple Configurator
   4. Select Profiles
   5. Select an Enrollment profile
   6. Select Export Profile (.mobileconfig)
3. Device: Enroll the macOS device
   1. Transfer the downloaded .mobileconfig file to the macOS device.
   2. Open the .mobileconfig file
   3. Open System Settings.
   4. Navigate to General > Device Management.
      1. On older versions of macOS, the path may be System Preferences > Profiles.
   5. Select the downloaded enrollment profile and choose Install.
   6. Review the profile information and select Continue.
   7. If prompted, enter the local administrator credentials for the Mac.
   8. Complete any additional authentication prompts required by Microsoft Intune.
   9. Wait for profile installation and device registration to complete.
4. Device: Verify Enrollment Status
   1. Open System Settings > General > Device Management.
   2. Confirm that the Microsoft Intune management profile is present.
5. Intune: Verify Device Enrollment
   1. Return to the Microsoft Intune admin center.
   2. Confirm the device appears under: Devices > macOS.
   3. Verify the device status shows as Managed and Compliant (if compliance policies are assigned).