iOS/iPadOS Intune Overview

This page provides an overview of the key aspects of enrolling and managing iOS/iPadOS devices on NHSmail Intune. For further detail on iOS/iPadOS device management, please navigate to the Operations Guide and Terms of Reference and watch the recordings for the iOS/iPadOS related upskilling sessions.

1. Device and Software Requirements

Prior to enrolling any iOS/iPadOS devices onto Intune, the following minimum device and software requirements should be validated:

	Apple iOS + iPadOS devices must run iOS 13.0 or later
	iOS/iPadOS devices to be enrolled need to exist in the organisation’s ABM instance
	Unenroll from any existing MDM solution

2. Licence Requirements

	EMS E3 Licences for all end-users & LAs using single user devices
	AADP2 Licenses for all end-users & LAs using single user devices (excluding mobile phone devices)

3. User Device Types

	iPadOS devices can be enrolled as either single user devices or shared devices
	If enrolling a shared device, a separate enrolment profile will be required

4. Enrolment for iOS/iPadOS

The following are key points to note regarding the enrolment of iOS/iPadOS devices:

	ABM link into NHSmail Intune tenant must be complete in order to enrol iOS/iPadOS devices
	Enrolment program tokens will be unavailable if ABM link has not been completed
	iOS/iPadOS devices will only visible on the Device Overview page after end user enrolment

5. Ongoing Management

In order to ensure effective management of iOS/iPadOS devices on Intune, the following must be done:

	Ensure devices updated to latest version/OS
	Review policies frequently
	Stay up-to-date with latest Apple/Microsoft updates
	Renew ABM token annually (expire every 365 days)
	Renew VPP tokens annually (expire every 365 days)

6. Application Management

	Apps will need to be purchased via an iOS VPP (managed by ABM) and assigned in Intune
	There are no limits to number of applications you can deploy and there are no restrictions on application types

7. ABM Link & VPP Token

	A service request can be raised to schedule an ABM link session with the Intune Live Service Team (this covers both ABM Link and VPP Token connections to Intune)
	Please visit our ABM & VPP Connection to Intune Support Site article for full details

8. Supporting Documentation

There are several supporting documents which LAs and end users can access to help with the rollout of Intune and facilitate troubleshooting

For Local Admins:
	Operations Guide for Local Administators and Onboarding Managers
For End Users:
	iOS/iPadOS Quick Start End User Guide
	iOS/iPadOS FAQs

9. Requesting Support

	LAs can raise a Level 3 technical incident ticket for issues relating to the enrolment and/or management of an iOS/ iPad OS device
	Level 3 technical incidents should only be raised after the Operations Guide for LAs and Onboarding Managers have been consulted and LAs have made use of their RBAC permissions
	There is a prior set-up session required to begin enrolling iOS/iPadOS devices. This session can be raised as a service request: ‘Request to onboard your organisation’s Apple Buisness Manager (ABM) for Apple Devices’.
	Requests to add an iOS/iPadOS enrolment profile to an AAD Group should be raised as a service request