As Microsoft starts to empower the integration for non Windows devices and also the available apps for macOS devices you might want to profit from your existing MDM solution of choice (Microsoft Intune) and enable features like conditional access or Windows Defender ATP on your macOS devices. This post covers the enrollment with the company portal app. If you want to enroll your devices with DEP (device enrollment program) you can find a great guide here.
Mind the enrollment restrictions
Let's start and check the configured enrollment restrictions to make sure that the macOS enrollment is not blocked for your tenant. You'll find them on your Intune dashboard under: Microsoft Intune > Device enrollment - Enrollment restrictions
Get an Apple MDM push certificate
Something was touched that wasn't supposed to be, according to the OS. Exe Faulting module path: C: Program Files IBM SQLLIB BIN DB2CLIO. Dll) you may find a fix in versions 2018. Posted by sde444: 'Exception Code 0xc0000005 Crash. It doesn't matter what name I enter, how long it is, etc. Exe, version: 1. Global Nav Open Menu Global Nav Close Menu; Apple; Shopping Bag +. File and Printer Sharing is an operating system feature on your Mac® computer where all the computers in your network can send communications to a computer or send print jobs to a printer. All your computers should be part of the main network for File and Printer Sharing to work properly. This Agreement shall bind and inure to the benefit. Intune lets you manage macOS devices to give users access to company email and apps. As an Intune admin, you can set up enrollment for company-owned macOS devices and personally owned macOS devices ('bring your own device' or BYOD).
Without loosing into details - you need an Apple MDM push certificate (also called APNs) to manage apple devices with MDM. The push certificate allows your MDM solution to send notifications about device actions to your end devices (e.g. wipe, app installation, new policy). To request a push certificate you need a valid Apple ID.
In Intune navigate to the Apple enrollment section and download your CSR. The CSR is required to request the APNs certificate.
Now access the Apple push certificate portal and sign in with a valid apple ID.
Request a new certificate and upload your CSR when prompted. Afterwards switch back to your Intune portal and upload the issued APNs certificate.
Enroll your first macOS machine
Here a little walk trough from an end users perspective.
First sign in to the Intune device portal with your browser and Microsoft account: https://portal.manage.microsoft.com/.
Now you're ready to empower the Microsoft power on your macOS devices!
Last week Microsoft finally released their new Azure Virtual Machine series Dv3 and Ev3, besides being based on the latest Intel hardware, these machine are also running Windows Server 2016 as the host OS which supports nested virtualization. Why is that interesting you might ask? Well, it is interesting because now it is possible to run hyper visors inside an Azure VM. To me as a developer that is pretty cool, because now I can actually create a development machine in the cloud, install hyper-v on it and run my mobile emulators or even use docker for Windows, which is dependent on Hyper-V. Furthermore, as I'm going to show in this blog post, I can also install an open source Hypervisor like VirtualBox and use that to emulate a Mac, of course that can also be done on a local machine, but the benefit of running it in the cloud is that it can be online 24×7 which is great if you need a build or test server. (Beware that Apple licensing is probably not going to approve of this, but let's save that concern for another day).
So what do you need:
- You need 1 Azure VM based on Ev3 or Dv3, for my testing I used a Standard_E2_v3 hosted in West Europe (Currently the new machine are only in West US2, East US2, Southeast Asia and West Europe). I just picked Windows Data Center 2016 and installed everything from the azure portal. No ARM templates for my testing purpose.
- Once the machine is provisioned, you need VirtualBox. You can download that from https://www.virtualbox.org/wiki/Downloads. For some reason it downloaded super slow from Azure, so I downloaded i on my local machine and uploaded it through remote desktop.
- With VirtualBox installed it is time, to install the operation system of your choice on your nested virtual machine. As I promised I'm going to install MacOS Sierra. Luckily, some more Apple Savy people have described how to do, the guide I followed are https://techsviewer.com/install-macos-sierra-virtualbox-windows. Basically the guide boils down to download a base image, then setup a VM in virtual box and do a few tweaks to it, to trick MacOS into thinking it is running on a Mac, and the boot the machine.
- You can download the image from https://goo.gl/OKgCeH
- When you create your new VM from the downloaded image select MacOS as type, and El Captain 64bit as the Version
- The commands you are required to run using VBoxManage (which is found in
C:Program FilesOracleVirtualBox) areVBoxManage.exe modifyvm 'macos' --cpuidset 00000001 000106e5 00100800 0098e3fd bfebfbff
VBoxManage setextradata 'macos' 'VBoxInternal/Devices/efi/0/Config/DmiSystemProduct' 'iMac11,3'
VBoxManage setextradata 'macos' 'VBoxInternal/Devices/efi/0/Config/DmiSystemVersion' '1.0'
VBoxManage setextradata 'macos' 'VBoxInternal/Devices/efi/0/Config/DmiBoardProduct' 'Iloveapple'
VBoxManage setextradata 'macos' 'VBoxInternal/Devices/smc/0/Config/DeviceKey' 'ourhardworkbythesewordsguardedpleasedontsteal(c)AppleComputerInc'
VBoxManage setextradata 'macos' 'VBoxInternal/Devices/smc/0/Config/GetKeyFromRealSMC' 1
Replace'macos'with the name of the virtual machine you created. - Before you try to boot the machine be sure to increase the Video memory of the VM 128 MB, it will not boot with less.
This is all it takes to get MacOS up and running on Azure using nested virtualization and Virtual Box. If you are planning to do a lot of work on MacOS, I can recommend using a machine with SSD. Also note that the image linked to is not the latest version of Sierra, so you will have to run an update after the installation. If someone can point me to a public downloadable image of a more recent version please let me know in the comments.
Inure Mac Os Catalina
Categories: SoftwareWindows Azure
