Microsoft Intune: Enrollment time grouping for iOS/iPadOS automated device enrollment

🚨 The Signal: Intune now supports enrollment time grouping for iOS/iPadOS ADE, allowing devices to be assigned to Entra ID groups faster. This reduces latency for policy and app delivery, improving device setup efficiency and security posture.

The Impact

Intune administrators are affected, with a reduced risk of unconfigured devices due to faster policy application.

  • Intune Admins: Faster policy deployment to new iOS/iPadOS devices.
  • Security Teams: Reduced window for unmanaged device exposure.
  • End Users: Quicker access to required applications and configurations.

The Action

  1. Navigate to Microsoft Intune admin center > Devices > iOS/iPadOS > iOS/iPadOS enrollment.
  2. Create a new enrollment profile or edit an existing Automated Device Enrollment profile.
  3. In the 'Group' section, add a static Entra ID group that devices will join upon enrollment.
  4. Assign relevant apps and policies to this Entra ID group.
  5. Review existing iOS/iPadOS ADE profiles to leverage this new grouping capability for faster policy application.

Domain: Intune · Impact: medium · Workload: Intune