Apple devices · Microsoft Intune
Choose one device. Follow one safe route.
You do not need to learn every Intune menu first. Start with ownership and intended use, build a small pilot, then open the guide that matches the device in front of you.
The 30-second decision
What are you managing?
Ownership matters more than the logo on the device. It determines how much control the school should have and which enrolment route is appropriate.
Connect Microsoft Entra ID and Platform SSO
Authentication choices, settings policy, registration, evidence and recovery checks.
Configure Mac identity →iPhone or iPadPlan, enrol, secure and support
Eight expandable stages covering certificates, Apple School Manager, compliance, settings, apps and remote actions.
Open iOS/iPadOS guide →Mac · choose enrolmentBYOD, ADE or direct?
A visual decision guide for personal, 1:1 school-owned and user-less or shared Macs.
Choose a Mac route →Mac · user walkthroughCompany Portal, Entra and PSSO
Screenshot-led steps for enrolment, management-profile approval and Platform SSO registration.
Open visual walkthrough →Shared foundations
Prepare these before any Apple enrolment.
What should I write down?
The organisation-owned Apple account used for APNs, certificate expiry and renewal owner, Apple School or Business Manager token owner, pilot groups, support contact and the person authorised to wipe or release a device.
What is the safest first pilot?
Use 5–10 representative devices, real users and the real network. Confirm enrolment, restart, app installation, compliance reporting, noncompliance guidance, updates and one low-impact remote action before expanding the assignment.