How to Resolve macOS Setup Issues with Microsoft Intune and Endpoint Manager
Question details
Users are encountering an enrollment glitch where required apps and configuration profiles are assigned and installed before signing into the Company Portal, blocking normal workflow.
- Product
- Microsoft Intune / Endpoint Manager
- Device & OS
- macOS
- Scenario
- Performing automated macOS device enrollment through Apple Business Manager via Microsoft Intune.
- Observed behavior
- Configuration profiles and apps load prematurely before user authentication in the Company Portal, requiring manual removal and reinstallation of profiles to complete the sign-in process.
Ensure you have global administrator or Intune administrator privileges in your Microsoft Endpoint Manager admin center to view and export device enrollment logs.
Consult Microsoft Intune Specialists on the Community Hub
Since altering basic enrollment settings rarely fixes this specific Apple Business Manager workflow glitch, escalating the issue to dedicated Intune specialists is the most effective approach.
Many administrators attempt to resolve this by changing the Intune enrollment setting to 'Available, no prompts' or 'Unavailable'. However, this typically does not resolve the underlying profile assignment issue during the automated macOS enrollment phase.
Open your web browser and go to the Microsoft Tech Community website, specifically targeting the Intune and Configuration Manager forum.
Visit the direct URL: https://techcommunity.microsoft.com/t5/microsoft-intune-and/ct-p/microsoft-endpoint-manager to reach the dedicated support area.
Create a new discussion thread. Detail your Apple Business Manager setup, mention that profiles are assigning before Company Portal sign-in, and attach relevant macOS MDM logs for the specialists to investigate.
Review Configuration Profile Assignment Targets
Verify that your macOS configuration profiles are targeting User Groups rather than Device Groups to prevent premature installation.
Simplify Your Enterprise Office Deployment with WPS Office
Troubleshooting complex Microsoft Endpoint Manager and Microsoft 365 deployment issues on macOS can consume valuable IT hours. Consider WPS Office as a lightweight, highly compatible alternative. It installs rapidly on Mac devices and reduces the overhead of managing heavy application profiles.
- 1. Download the WPS Office Package: Visit the official WPS website to download the latest macOS installer suitable for enterprise deployment.
- 2. Deploy via MDM: Upload the lightweight WPS Office package to your preferred Mobile Device Management (MDM) solution.
- 3. Assign to Mac Users: Push the application to your macOS endpoints for immediate, hassle-free document productivity.
Frequently Asked Questions
Why are Intune configuration profiles installing on my Mac before Company Portal sign-in?
This typically happens during Automated Device Enrollment (ADE) when profiles or required apps are assigned to Device Groups instead of User Groups. The MDM server pushes device-targeted payloads immediately upon network connection, bypassing user authentication.
Will changing the enrollment setting to 'Unavailable' fix this macOS Intune issue?
No. Changing the enrollment setting to 'Available, no prompts' or 'Unavailable' generally does not resolve the underlying assignment workflow issue in Apple Business Manager and Intune.
Where can I get expert help for Microsoft Endpoint Manager macOS enrollment errors?
The most effective place to get advanced troubleshooting for Intune enrollment is the Microsoft Intune and Configuration Manager forum on the Microsoft Community Hub, where Microsoft specialists actively review complex workflow issues.
