# IntuneMacAdmins Docs ## Docs - [Welcome](https://docs.intunemacadmins.com/readme.md): Community Guides, Tools and Best Practices for macOS admins who manage their devices with Microsoft Intune. - [Changelog](https://docs.intunemacadmins.com/changelog.md): A transparent record of what changed across IntuneMacAdmins, when it changed, where it was published, and which sources support it. - [Getting Started](https://docs.intunemacadmins.com/home/getting-started.md): Begin your journey with easy navigation and comprehensive guides for macOS administration. - [How to Contribute](https://docs.intunemacadmins.com/home/how-to-contribute.md): Contribute to IntuneMacAdmins by forking the repo, making changes, and submitting a pull request. - [Contributors ❤️](https://docs.intunemacadmins.com/home/contributors.md): Share feedback by creating an issue on our GitHub repository to discuss with the community. - [Our Sponsors ❤️](https://docs.intunemacadmins.com/home/sponsors.md): A thank you to the sponsors who help keep IntuneMacAdmins free for the community. - [Feedback](https://docs.intunemacadmins.com/home/feedback.md): Share feedback by creating an issue on our GitHub repository to discuss with the community. - [What's New in Intune](https://docs.intunemacadmins.com/home/whats-new.md): The released Microsoft changes and important notices that matter for macOS management, with links to the authoritative sources. - [Community Resources](https://docs.intunemacadmins.com/community/community-resources.md): A list of resources that the community has shared. - [Community Tools and Scripts](https://docs.intunemacadmins.com/community/community-tools.md): A list of tools and scripts that the community has shared. - [ESP for macOS - Swift Dialog](https://docs.intunemacadmins.com/community/esp-for-macos-swift-dialog.md): ESP for macOS - Swift Dialog - [FAQ](https://docs.intunemacadmins.com/frequently-asked-questions/faq.md): Find answers to frequently asked questions about macOS management with Intune. Learn about VPP tokens, enrollment, device assignments, updates, and more. - [Importing Baseline Settings into Intune](https://docs.intunemacadmins.com/baseline-settings-for-intune/import.md): Step-by-step guide to importing baseline settings into your Intune tenant. - [Contributing to the Baseline Settings](https://docs.intunemacadmins.com/baseline-settings-for-intune/contribute.md): A guide on contributing to the baseline settings. - [Settings Overview](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview.md): Overview of all settings with best practices for Intune. - [Platform SSO](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/platformsso.md): How to configure Platform SSO for your Intune tenant. - [Antivirus Configuration](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/antivirusconfiguration.md): How to configure Antivirus Configuration for your Intune tenant. - [Defender for Endpoint (MDE) Configuration](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/mdeconfiguration.md): How to configure Defender for Endpoint (MDE) Configuration for your Intune tenant. - [Accounts and Login](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/accountsandlogin.md): How to configure Accounts and Login for your Intune tenant. - [Restrictions](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/restrictions.md): How to configure Restrictions for your Intune tenant. - [FileVault](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/filevault.md): How to configure FileVault for your Intune tenant. - [Gatekeeper](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/gatekeeper.md): How to configure Gatekeeper for your Intune tenant. - [Microsoft AutoUpdate (MAU) Configuration](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/mauconfiguration.md): How to configure Microsoft AutoUpdate (MAU) for your Intune tenant. - [Microsoft Edge Password Management](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/edgepasswordmanagement.md): How to configure Microsoft Edge Password Management for your Intune tenant. - [Microsoft Edge Security](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/edgesecurity.md): How to configure Microsoft Edge Security for your Intune tenant. - [Microsoft Edge Extensions](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/edgeextensions.md): How to configure Microsoft Edge Extensions for your Intune tenant. - [Microsoft Edge Profiles and Sign-in Sync](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/edgeprofilessigninsync.md): How to configure Microsoft Edge Profiles and Sign-in Sync for your Intune tenant. - [Microsoft Edge Updates](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/edgeupdates.md): How to configure Microsoft Edge Updates for your Intune tenant. - [Microsoft Office Configuration](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/officeconfiguration.md): How to configure Microsoft Office Configuration for your Intune tenant. - [OneDrive Service and Access](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/onedriveserviceandaccess.md): How to configure OneDrive Service and Access for your Intune tenant. - [OneDrive Known Folder Move](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/onedriveknownfoldermove.md): How to configure OneDrive Known Folder Move for your Intune tenant. - [Software Updates](https://docs.intunemacadmins.com/baseline-settings-for-intune/settingsoverview/updates.md): How to configure Software Updates for your Intune tenant. - [Troubleshooting](https://docs.intunemacadmins.com/troubleshooting-guides/troubleshooting.md): Troubleshooting guides for common macOS management issues in Microsoft Intune, including enrollment errors and their fixes. - [Enrollment Error](https://docs.intunemacadmins.com/troubleshooting-guides/enrollment-error.md): Fix the "Your IT support doesn't allow OSX devices" macOS enrollment error in Intune by adjusting Apple device platform restrictions. - [Snippets](https://docs.intunemacadmins.com/snippets/snippets.md): A collection of handy macOS management snippets for Intune admins, including packaging commands and useful shortcuts. - [Packaging](https://docs.intunemacadmins.com/snippets/packaging.md): Collection of snippets like short commands or steps for packaging. - [Shortcuts](https://docs.intunemacadmins.com/snippets/shortcuts.md): Collection of useful shortcuts. - [Intune Getting Started Guide](https://docs.intunemacadmins.com/intune-getting-started-guide/intune-getting-started-guide.md): Get started with Microsoft Intune for macOS, covering the prerequisites and the basic tenant setup needed to begin managing Mac devices. - [Prerequisites](https://docs.intunemacadmins.com/intune-getting-started-guide/prerequisites.md): Learn about the prerequisites for macOS management with Intune. - [Basic Tenant Setup](https://docs.intunemacadmins.com/intune-getting-started-guide/basic-tenant-setup.md): Learn how to set up a basic tenant in Intune for macOS devices. - [Complete Guide to macOS Deployment](https://docs.intunemacadmins.com/complete-guide-macos-deployment/complete-guide-macos-deployment.md): An end-to-end guide to deploying and enrolling macOS devices with Microsoft Intune, from Apple Business Manager to FileVault, Platform SSO, and Microsoft Defender. - [Apple Business Manager](https://docs.intunemacadmins.com/complete-guide-macos-deployment/apple-business-manager.md): Learn how to set up and use Apple Business Manager for efficient device management in your organization. This guide covers the benefits, application process, and integration with MDM solutions. - [Integrate Apple Business Manager with Intune](https://docs.intunemacadmins.com/complete-guide-macos-deployment/integrate-apple-business-manager-with-intune.md): Step-by-step guide on integrating Apple Business Manager with Microsoft Intune. Learn how to create an Apple MDM Push certificate and set up the Apple Automated Device Enrollment Token. - [Add a device to Apple Business Manager](https://docs.intunemacadmins.com/complete-guide-macos-deployment/add-a-device-to-apple-business-manager.md): Detailed instructions on adding devices to Apple Business Manager using Apple Configurator. Learn how to create enrollment profiles and sync devices with Intune for seamless management. - [Configure MacOS Platform SSO](https://docs.intunemacadmins.com/complete-guide-macos-deployment/configure-macos-platform-sso.md): Comprehensive guide on configuring MacOS Platform SSO (Single Sign-On) with Secure Enclave Key. Learn about prerequisites, policy creation, and important considerations for implementation. - [Enable FileVault during the Setup Assistant](https://docs.intunemacadmins.com/complete-guide-macos-deployment/enable-filevault-during-the-setup-assistant.md): Learn how to enable FileVault encryption during the MacOS Setup Assistant. This guide covers the necessary steps to configure FileVault policies in Intune for enhanced device security. - [Install the Company Portal app for MacOS as a MacOS LOB app](https://docs.intunemacadmins.com/complete-guide-macos-deployment/install-the-company-portal-app-for-macos-as-a-macos-lob-app.md): Step-by-step instructions on installing the Company Portal app for MacOS as a Line-of-Business (LOB) app. Learn how to download, add, and assign the app in Intune for seamless device management. - [User Experience on a MacOS Device](https://docs.intunemacadmins.com/complete-guide-macos-deployment/user-experience-on-a-macos-device.md): A screenshot walkthrough of the macOS Setup Assistant enrollment experience into Intune with Platform SSO, as seen by the end user. - [Enroll MacOS in Microsoft Defender](https://docs.intunemacadmins.com/complete-guide-macos-deployment/enroll-macos-in-microsoft-defender.md): Learn how to enroll MacOS devices in Microsoft Defender for Endpoint. This guide provides step-by-step instructions on setting up the necessary configurations and policies in Intune to integrate MacOS - [Declarative Device Management (DDM)](https://docs.intunemacadmins.com/complete-guide-macos-deployment/declarative-device-management.md): Declarative Device Management (DDM) is an update to the existing protocol for device management that can be used in combination with the existing MDM protocol capabilities. It allows the device to asy - [Rapid Security Response](https://docs.intunemacadmins.com/complete-guide-macos-deployment/rapid-security-response.md): Rapid Security Response (RSR) is a new type of software release for Mac. It delivers important security improvements between software updates – for example, improvements to the Safari web browser, the - [Await Final Configuration](https://docs.intunemacadmins.com/await-final-configuration/await-final-configuration.md): Understand the macOS "Await Final Configuration" state and learn how to configure it with Microsoft Intune for secure, compliant device deployment. - [What is Await Final Configuration?](https://docs.intunemacadmins.com/await-final-configuration/what-is-await-final-configuration.md): Explore the 'Await Final Configuration' state in Apple Device Management for secure, compliant, and user-friendly device deployment. - [Configure Await Final Configuration](https://docs.intunemacadmins.com/await-final-configuration/configure-await-final-configuration.md): Configure 'Await Final Configuration' for macOS in Intune to ensure proper device setup and compliance. - [Insights](https://docs.intunemacadmins.com/await-final-configuration/insights.md): Insights about 'Await Final Configuration'. - [Platform Single Sign-On](https://docs.intunemacadmins.com/platform-single-sign-on-psso/platform-single-sign-on.md): Learn what Platform Single Sign-On (PSSO) is and how to configure it on macOS with Microsoft Intune for seamless, secure sign-in across apps and browsers. - [What is PSSO?](https://docs.intunemacadmins.com/platform-single-sign-on-psso/what-is-psso.md): Understand the benefits of Platform Single Sign-On (PSSO) for macOS, including authentication methods, security, and user experience. - [Configure PSSO](https://docs.intunemacadmins.com/platform-single-sign-on-psso/configure-psso.md): Step-by-step guide to configuring Platform Single Sign-On (PSSO) on macOS. Learn best practices, troubleshooting tips, and how to optimize PSSO settings for your organization's security needs. - [Browser PSSO](https://docs.intunemacadmins.com/platform-single-sign-on-psso/browser-sso.md): Configuring Platform SSO for web browsers such as Google Chrome and Mozilla Firefox. - [Insights](https://docs.intunemacadmins.com/platform-single-sign-on-psso/insights-psso.md): Explore key insights on Platform Single Sign-On (PSSO) for macOS, including security considerations, user experience, and the benefits of Secure Enclave vs. Password methods. - [Declarative Device Management](https://docs.intunemacadmins.com/declarative-device-management-ddm/declarative-device-management.md): Understand Declarative Device Management (DDM) on macOS and learn how to configure it with Microsoft Intune for scalable, responsive device management. - [What is Declarative Device Management?](https://docs.intunemacadmins.com/declarative-device-management-ddm/what-is-declarative-device-management.md): Learn about Declarative Device Management (DDM), its benefits, and how it works on macOS devices. - [Configure Declerative Device Management](https://docs.intunemacadmins.com/declarative-device-management-ddm/configure-declarative-device-management.md): Step-by-step guide to configuring Declarative Device Management (DDM) on macOS. - [Insights](https://docs.intunemacadmins.com/declarative-device-management-ddm/insights.md): Insights about 'Declarative Device Management'. - [Custom Attributes](https://docs.intunemacadmins.com/custom-attributes/custom-attributes.md): Learn what custom attributes are and how to create custom attribute scripts in Microsoft Intune to collect tailored data from managed macOS devices. - [What are Custom Attributes?](https://docs.intunemacadmins.com/custom-attributes/what-are-custom-attributes.md): Learn about custom attributes in macOS management, their benefits, and how they enhance device configuration, reporting, and automation in Intune. - [Create a Custom Attribute Script](https://docs.intunemacadmins.com/custom-attributes/create-custom-attributes.md): Learn how to create a custom attribute script in Intune to collect specific information from managed macOS devices. - [Insights](https://docs.intunemacadmins.com/custom-attributes/insights.md): Gain valuable insights into using custom attributes for macOS management. Discover best practices, use cases, and expert tips for leveraging this powerful feature. - [FileVault](https://docs.intunemacadmins.com/filevault/filevault.md): Learn what FileVault is and how to enable macOS full-disk encryption during the Setup Assistant with Microsoft Intune to protect data on managed Macs. - [What is FileVault?](https://docs.intunemacadmins.com/filevault/what-is-filevault.md): Learn about FileVault, macOS's built-in disk encryption feature. Discover its key features, benefits, and how it enhances data security on your Mac. - [Enable FileVault in Setup Assistant](https://docs.intunemacadmins.com/filevault/enable-filevault-in-setup-assistant.md): Step-by-step guide on enabling FileVault during macOS Setup Assistant using Intune. Learn about prerequisites, configuration profiles, and best practices. - [Insights](https://docs.intunemacadmins.com/filevault/insights.md): Gain valuable insights into FileVault for macOS. Explore advanced topics, troubleshooting tips, and expert recommendations for optimal FileVault implementation. - [OneDrive Known Folder Move (KFM)](https://docs.intunemacadmins.com/onedrive-known-folder-move-kfm/onedrive-known-folder-move-kfm.md): Learn what OneDrive Known Folder Move (KFM) is and how to configure it on macOS with Microsoft Intune to redirect and back up users' key folders to OneDrive. - [What is OneDrive KFM?](https://docs.intunemacadmins.com/onedrive-known-folder-move-kfm/what-is-onedrive-kfm.md): Learn about OneDrive Known Folder Move (KFM), its benefits, and how to configure it for macOS devices. - [Configure KFM](https://docs.intunemacadmins.com/onedrive-known-folder-move-kfm/configure-kfm.md): Step-by-step guide to configuring OneDrive Known Folder Move (KFM) on macOS. Learn best practices, troubleshooting tips, and how to optimize KFM settings for your organization's needs. - [Insights](https://docs.intunemacadmins.com/onedrive-known-folder-move-kfm/insights.md): Discover important insights about OneDrive Known Folder Move (KFM) for macOS, including troubleshooting tips and potential conflicts with iCloud sync. - [Updating Microsoft Apps](https://docs.intunemacadmins.com/updating-microsoft-apps/updating-microsoft-apps.md): Learn how to keep Microsoft apps up to date on macOS devices with Microsoft AutoUpdate (MAU) and Microsoft Intune. - [How to Update Microsoft Apps](https://docs.intunemacadmins.com/updating-microsoft-apps/how-to-update-microsoft-apps.md): Learn how to update Microsoft apps on macOS devices using Microsoft AutoUpdate (MAU). - [What is Microsoft Auto Update (MAU)?](https://docs.intunemacadmins.com/updating-microsoft-apps/microsoft-auto-update.md): Learn about Microsoft Auto Update (MAU), its key features, and how to use it to keep Microsoft applications on macOS up-to-date. - [Insights](https://docs.intunemacadmins.com/updating-microsoft-apps/insights.md): Key insights and considerations for keeping Microsoft apps updated on macOS devices managed with Intune. - [Deploy Files on a Mac](https://docs.intunemacadmins.com/deploy-files-on-a-mac/deploy-files.md): Learn how to deploy files to macOS devices with Microsoft Intune, including the steps to follow and practical insights. - [How to deploy Files on a Mac](https://docs.intunemacadmins.com/deploy-files-on-a-mac/how-to-deploy-files.md): Learn how to deploy files on macOS devices using Intune. - [Insights](https://docs.intunemacadmins.com/deploy-files-on-a-mac/insights.md): Insights on how to deploy files on macOS devices using Intune. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on a page URL with the `ask` query parameter: ``` GET https://docs.intunemacadmins.com/readme.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.