Question

Your organization has purchased 200 Mac laptops that are already enrolled in Apple Business Manager (ABM). You have connected the ABM token to Intune and created an enrollment profile. Now the security team wants you to silently deploy purchased volume apps to these Macs without requiring an Apple ID on each device. Which additional configuration in Intune is required to meet this requirement?

Accepted Answer

Add an Apple Volume Purchase Program (VPP) token in Intune and assign apps with the 'Device licensing' license type

Answer

Enable automatic MDM enrollment for the macOS user scope in Entra ID

Answer

Configure an Apple MDM push certificate (APNs) and assign the apps with 'User licensing'

Answer

Create a dynamic device group for the Macs and deploy the apps as required LOB packages