Hybrid Azure AD Join during initial setup.

Azure Active Directory (for cloud-only setups), or even do a.

Active Directory (for enterprise with on-premise infrastructure), or.Let’s start with an analogy to Windows 10 in enterprise landscape as a reference. Why and When to bind Mac devices to Active Directory? Users are subjected to the organization’s domain password policies.Users can use the same AD credentials to authenticate and gain authorization to secure resources.Users can use their AD account to sign-in to their Mac devices.What is Directory Binding in Mac?įor a simpler understanding, AD Binding a Mac is essentially the same as what Domain Join is for Windows. However, it is not entirely impossible! So let’s get started. Microsoft Intune does not have any native configuration to bind Mac devices to Active Directory. The only option then that you are left with is to bind those Mac devices to Active Directory to let end-users sign-in using their corporate AD credentials.īut there is still one more problem left… What if you are not using either of the three as mentioned above? Lastly, there is Apple Business Manager with Federated Authentication support which allows end-users to sign-in to ADE (a.k.a DEP) provisioned Mac devices using their Azure AD credentials. Then there is JumpCloud, an open cloud directory platform with unified endpoint management capabilities, which has its own way of provisioning a Mac with JumpCloud managed identity. (Similar to Windows Autopilot experience) Now JAMF solves this with JAMF Connect which allows provisioning a Mac device with a cloud identity and you can also configure if the account provisioned should have local admin rights or not. Recently while working on one such project which involves Mac management using Intune natively (no JAMF), I came across a similar situation.Ĭlient Requirement – End-user to be able to sign-in to company-provided Mac devices using their corporate credentials. The fun part of working on projects is the opportunity to face new challenges which makes us go back to our lab. Monitor Profile deployment status from Intune.Create Custom Profile for Mac in Intune.Create an XML from the Configuration Profile (.mobileconfig).Test the Configuration Profile as created.Create Configuration Profile with Directory payload using Profile Manager.Pre-requisites to AD Bind Mac with Intune.How you can AD Bind Mac devices easily with Microsoft Intune.

What are the ways to bind a Mac to Active Directory?.Why and When to bind Mac devices to Active Directory?.

How to add mac to active directory