Jamf/Intune

[tdenton]

Morning All

I have been working for sometime on getting our macs compliant with intune. It does seem to work.

The process seems extremely clunky with users running through the steps in company portal which seems very user driven.

I'm sure I have read somewhere this process has become obsolete, is that right? Is there a better way?

Thanks 

[danlaw777]

i use this profile, send it out to all of your target machines, then run your device compliance install

[tdenton]

what does it do?
I assume you still have push company portal down to the device 

[danlaw777]

yes, push company portal, then this profile, which bypasses the users browser settings.

[tdenton]

So they dont have to go through the config process with company portal or just makes it easier. Sorry for all the questions thanks

[danlaw777]

yes they do, but when the device compliance is initiated, it uses this profile to control it, the end user has to sign in and verify. 

[AJPinto]

Are you in Intune or Entra? The Intune Conditional Access was replaced with Entra Device Compliance when Microsoft made API updates last year. Devices should not have live Objects in Intune anymore, everything should be in Entra.

I completely agree this is a very clunky user driven process, mainly because Entra (and Intune before it) are driven by user identity, and there is no way to automate sorting out user identity so the user must be directly involved for just about all troubleshooting.

[tdenton]

yep entra I belive we had to make some changes when the update was done