Microsoft Intune - Enrollment - How to choose the appropriate device enrollment method

Summary

This article helps IT staff determine the appropriate Microsoft Intune enrollment method for Apple and Windows devices. After selecting the appropriate enrollment method, use the corresponding enrollment KBA to complete the device enrollment process.

Body

Self-Help Article (External)

Purpose

This article helps IT staff determine the appropriate Microsoft Intune enrollment method for Apple and Windows devices. After selecting the appropriate enrollment method, use the corresponding enrollment KBA to complete the device enrollment process.

Requirements

Step-by-Step Procedures

  1. Identify Device Type
    1. Determine if the device is:
      1. Apple (iOS, iPadOS, macOS)
      2. Windows
  2. Identify Device Ownership
    1. Determine if the device will be:
      1. User-assigned device (assigned to a specific user)
      2. Shared or task-based device (used by multiple users or for a specific purpose)
  3. Identify Device State
    1. Determine if the device is:
      1. New / at initial setup (OOBE or Setup Assistant)
      2. Reset to factory settings
      3. Already in use / configured
  4. Select Enrollment Method
    Use the tables below to determine the appropriate enrollment method.
     
    1. Apple School Manager (ASM) Devices
      1. Device Type 2. Device Ownership 3. Device State 4. Enrollment Method User Affinity
      Apple (iOS, iPadOS, macOS) User Assigned or Shared / Task-Based Device is in Apple School Manager (ASM) or can be imported into ASM.

      This is the preferred enrollment method for Apple devices.
      Microsoft Intune - Enrollment - How to enroll an Apple device with Apple School Manager (ASM) User Affinity or No User Affinity
    2. iOS/iPad Devices
      1. Device Type 2. Device Ownership 3. Device State 4. Enrollment Method User Affinity
      iOS/iPad User-Assigned Device is not in ASM and can be reset to factory settings. Microsoft Intune – Enrollment – How to enroll an Apple iOS/iPadOS Device with Apple Configurator (Setup Assistant) User Affinity
      iOS/iPad Shared / Task-Based Device is not in ASM, is already in use, cannot be reset. Microsoft Intune – Enrollment – How to enroll an Apple iOS/iPadOS Device with Apple Configurator (Direct Enrollment) No User Affinity
      iOS/iPad User Assigned or Shared / Task-Based Device is not in ASM and IT staff will manually install an enrollment profile (.mobileconfig) on the device. Microsoft Intune – Enrollment – How to enroll an Apple iOS/iPadOS Device using an Apple Configurator enrollment profile (.mobileconfig) User Affinity or No User Affinity
    3. MacOS Devices
      1. Device Type 2. Device Ownership 3. Device State 4. Enrollment Method User Affinity
      macOS User Assigned or Shared / Task-Based Device is not in ASM, IT staff will manually install an enrollment profile (.mobileconfig) and enroll the macOS device directly. Microsoft Intune – Enrollment – How to enroll a macOS Device using an Apple Configurator enrollment profile (.mobileconfig) User Affinity or No User Affinity
    4. Windows Devices
      1. Device Type 2. Device Ownership 3. Device State 4. Enrollment Method User Affinity
      Windows User Assigned or Shared / Task-Based Device is at the Windows Out-of-Box Experience (OOBE) or initial setup screen. Microsoft Intune - Enrollment - How to enroll a Windows device with a provisioning package 
      Use procedure - Provisioning Package Apply During Initial Setup
      Not applicable
      Windows User Assigned or Shared / Task-Based Device is already configured and the provisioning package will be run by opening the .ppkg file directly from the device. Microsoft Intune - Enrollment - How to enroll a Windows device with a provisioning package
      Use procedure - Provisioning Package Apply Directly
      Not applicable
      Windows User Assigned or Shared / Task-Based Device is already configured and the provisioning package will be applied through Settings > Accounts > Access work or school > Add or remove a provisioning package. Microsoft Intune - Enrollment - How to enroll a Windows device with a provisioning package
      Use procedure - Provisioning Package Apply After Initial Setup
      Not applicable
  5. Proceed to Enrollment Article
    1. After selecting the appropriate method, open the corresponding enrollment KBA and follow the step-by-step instructions.

 

 

Details

Details

Article ID: 20805
Created
Wed 6/24/26 1:16 PM
Modified
Thu 7/2/26 7:34 PM