How to ensure a Mac (company owned) is enrolled with InTune properly

Based on the issues that arose from the compliance changes that were made, here is how to ensure that a Mac (company owned) will remain able to use O365 apps moving forward:

In Intune, go to Devices, macOS, macOS Devices then search for the device in the search field (I normally start with the user’s email address)
Open the device then select Properties
Look for Device Ownership (it’s likely set to Personal)

Change Device Ownership to Corporate then check the box at the bottom acknowledging the change

Click Save at the top of the window
Tell the user to wait 5 minutes then reboot. Everything should work properly moving forward

The process will fix the issue at hand, HOWEVER… there should be one more step taken to ensure that the computer can be re-enrolled in the future (in the event of a rebuild, etc…)

In Intune, go to Devices, Enroll Devices, Corporate Device Identifiers (left side of the page)
Click +Add then select Enter Manually
Change “Select Identifier Type” from IMEI to Serial Number
- In the Identifier field, enter the Mac’s serial number… in Details, enter the user’s name
Click Addat the bottom of the screen.
- Wait until the add process completes before moving to another page/screen within Intune
That’s it – there’s no Save button. It’s done.

Any questions reach out to Global Ops.