would be great because the current version is diffrent

ikr

I believe it stands for mobile device management.

​@TheHDPerspective yes, but I believe the point is that this was not explained well, like what it does, why it's important, where does it fit in the whole process, etc...

You will need an MDM to be able to push out apps. The only other option if you don't have MDM would be to use Apple Configurator, which requires manually plugging devices into a Mac for configuration

Very welcome!

Yes if you are going to use the automation, it is all or nothing. I would say if most of your devices are going to the same MDM use the automation to do that and then go in manually and search for the few exceptions that you need to remove. And vice versa if you have more devices that need to be manually assigned

Determining the best MDM solution depends on your specific needs. If you require basic management tasks such as pushing WIFI profiles, enabling PIN codes for security, and deploying productivity apps, any MDM should suffice regardless of the number of devices. In this case, you can choose a budget-friendly option like Apple Business Essentials or Jamf Now. However, if you require more advanced features and capabilities, it may be necessary to upgrade to a more robust MDM solution. Advanced features could include scripting capabilities, integration with identity providers like Okta or Azure AD, or leveraging new features like Platform SSO for IDP integration and account creation. I hope this information helps guide you in choosing the right MDM solution. If you have any further questions, feel free to ask!

Appreciate it! My video skills get better with each video!

Certainly! Unfortunately, you cannot use your work email for both personal iCloud and Work iCloud. If you federate your Apple Business Manager (ABM) to create managed Apple IDs, and users set up their personal iCloud using their work-domain email, Apple will send them an email notifying them that their company is taking ownership of the ID. As a result, the user would need to associate their iCloud account with another email address. It's important to note that during this process, the user retains all their apps, purchases, iCloud data, and other personal information. They simply need to transfer it to a different email address for the work account to take ownership. Rest assured, the company will not have access to any of the user's personal data. I hope this explanation clarifies the situation for you. Let me know if you have any further questions or concerns.

@@5MinuteMobilitythat’s annoying. Everyone uses their work email as their Apple ID email, so none of this would work for us. We can’t give them 2 work emails.

Oh, good question, I need to investigate that myself as well!

Yes, it is! I live on the betas so at the time it may have looked a bit different than the production version

Did they supervise it, meaning did they put into their Apple Business Manager to allow the highest management level. You can try to remove the MDM configuration by opening settings, then General, and scroll down to VPN and Profile. You can then delete the MDM profile there. That will prompt removal of MDM. However, if the device is supervised they may have a policy preventing that. If they do not you can delete, you should not need to wipe and reset, but if you do and it prompts to log back into MDM, you will know it is supervised. Additionally, if it is supervised when you open settings it will display a text below your profile icon alerting you to that status. If it is supervised, I would advise going to apple wiht your proof of ownership to remove

You will need an MDM to distribute those apps you see in ABM. Within your MDM there is a token authentication between your MDM and ABM that essentially passes the applications in ABM to your MDM for distribution. You can use a 3rd party MDM like Jamf, Kandji, VMware Workspace One, Intune and others, or you can also sign up and use Apple’s Business Essentials that is integrated directly into ABM

I will add that to my list, what MDM are you using to distribute the apps?

You can distribute that privately to buisness and organizations through Apple Business Manager and Apple School Manager. I have experience on the customer side, but don't have experience on the developer side. But here are two KB's that go over the process and App Store Connect and ABM, I hope that helps: developer.apple.com/help/app-store-connect/manage-your-apps-availability/set-distribution-methods developer.apple.com/support/volume-purchase-and-custom-apps/

Thank you!

No right way here. One thing I have seen admins do is, first move everything in ABM from one to MDM server to another. Don’t worry any changes in ABM won’t take effect till the device is reset. Then once they are aligned to the new MDM server, you can wipe devices from the admin console via wipe command. From there end users will need to complete the new set up, but with them tied to ABM would be low touch. However, there is still room for error in having end users do that. Communication is key there. Other solutions would be you can look at that would cost are solutions like Ground Control or Apple’s tool called APU (Apple Provisioning Utility), which is a wired based solution that would allow you to set up docks where end users put their devices and the utility would auto wipe and provision to the new MDM, however there are costs to those. To your second question, once devices are aligned to the MDM server in ABM and policies and such are setup in Intune, once those devices are reset automated device enrollment will take over. This still requires some touches, including authentication. I would be happy to introduce you to a CDW Solution Architect who can help with these workflows

@@5MinuteMobility Thank you so much! Yes, I would appreciate it that!

Not a problem, email me at [email protected]

I appreciate you watching! Anything I can do to help make things better?