Hoping to have phones delivered direct to staff and have them setup the phone and connect to your company resources sounds straightforward but users are often left with the task of calling service desk asking how a phone is setup for work. Often users don’t have an Apple App Store account so when asked to install Outlook and Company Portal they are left bewildered.
It would be nice if the phone was partially setup for users but without the need for extra admin and staff to do this.
Setting up the Apple enrollment program and using the Volume purchasing program from Apple solves some of these issues.
Setup correctly users will get all the Apps they need out of the box
Once you have your DEP Program setup add phones as supervised.
Also lock enrollment this will stop users from unenrolling from Intune manually.
Do this from the Apple Enrollment Profiles in Intune
Apple Enrollment Profile
In your Apple Volume Purchase Program add you App
(BY THE WAY THIS IS THE OLDER PORTAL THEY HAVE NOW MOVED TO THE NEW PORTAL BUT THE CONCEPT IS THE SAME)
Apple Volume Purchase Program
Search for the App Required
Select quantity
Place order
Back in Intune go to Your iOS VPP Tokens
Ios VPP Tokens
Run a sync
This should now bring in the APP from the Apple Volume Licensing Program
Assign the App as Required
Add the Apps you would like your users to receive on first use, add them as required so that they install automatically.
I gave users
Company Portal, Microsoft Authenticator, Microsoft Outlook, and OneDrive
Assign the Apps to the Group and were done
Now on first use of the phone after the first few setup Screens users get the essential apps they need to get going.
