• Home
  • blog
  • "Remote deletion" of Microsoft...
"Remote deletion" of Microsoft 365 can manage various business use terminals even on iPhone

"Remote deletion" of Microsoft 365 can manage various business use terminals even on iPhone

Manage iOS / iPad OS with "Microsoft Intune"

The management of iPhone by Microsoft Intune uses "APNs" (Apple Push Notification Service) provided by Apple. APNs is a mechanism for push notifications to iPhones and iPads, and Microsoft Intune connects to iPhones and iPads via this and controls the terminal remotely.

Microsoft 365の「リモート削除」はiPhoneも、さまざまな業務利用端末を管理可能

To take advantage of these APNs, you need to configure an MDM push certificate. Select "Endpoint Management" from the Microsoft 365 admin center, open "Microsoft Endpoint Manager admin center", and select "Device"-"iOS" from the menu on the left. Click "iOS Registration" on the next screen to display the "Apple MDM Push Notification Certificate" item. An Apple ID is required to create an MDM push notification certificate.

To manage iOS / iPad OS with "Microsoft Intune", first get the MDM push certificate required to use APNs with "Microsoft Endpoint Manager admin center" The screen for getting the MDM push certificate. After downloading the CSR here, click "Create MDM Push Certificate" to go to the Apple website. On the destination Apple APNs website, select the CSR you downloaded earlier and upload it. Click Download to save the MDM push notification certificate locally and upload it on the Microsoft Endpoint Manager admin center screen. Install and launch the Intune Portal Site app from the App Store to sign in to Microsoft 365. Desired.This allows Intune to manage your installed devices.

There are two ways to register a device. You can either install and register the "Intune Portal Site" app from the App Store on an iPhone that has already been set up, or you can register all company-supplied devices at once.

For batch registration, use the "Apple Device Enrollment Program". This is Apple's program for businesses and educational institutions that eases the burden of kitting tasks such as device activation. You can use it to automate registration with Microsoft Intune.

On the other hand, if you want to use the Intune portal site, you need to install the app yourself, then sign in with your Microsoft 365 account to download and install the Intune management profile.