Inure Mac OS

Start up from macOS Recovery

Determine whether you're using a Mac with Apple silicon, then follow the appropriate steps:

Apple silicon

Turn on your Mac and continue to press and hold the power button until you see the startup options window. Click the gear icon labeled Options, then click Continue.

Intel processor

Inure

Make sure that your Mac has a connection to the internet. Then turn on your Mac and immediately press and hold Command (⌘)-R until you see an Apple logo or other image.

If you're asked to select a user you know the password for, select the user, click Next, then enter their administrator password.

In 1984, Apple debuted the operating system that is now known as the 'Classic' Mac OS with its release of the original Macintosh System Software. The system, rebranded 'Mac OS' in 1996, was preinstalled on every Macintosh until 2002 and offered on Macintosh clones for a short time in the 1990s. Intune lets you manage macOS devices to give users access to company email and apps. As an Intune admin, you can set up enrollment for company-owned macOS devices and personally owned macOS devices ('bring your own device' or BYOD).

Reinstall macOS

Select Reinstall macOS from the utilities window in macOS Recovery, then click Continue and follow the onscreen instructions.

Follow these guidelines during installation:

  • If the installer asks to unlock your disk, enter the password you use to log in to your Mac.
  • If the installer doesn't see your disk, or it says that it can't install on your computer or volume, you might need to erase your disk first.
  • If the installer offers you the choice between installing on Macintosh HD or Macintosh HD - Data, choose Macintosh HD.
  • Allow installation to complete without putting your Mac to sleep or closing its lid. Your Mac might restart and show a progress bar several times, and the screen might be empty for minutes at a time.

After installation is complete, your Mac might restart to a setup assistant. If you're selling, trading in, or giving away your Mac, press Command-Q to quit the assistant without completing setup. Then click Shut Down. When the new owner starts up the Mac, they can use their own information to complete setup.

Other macOS installation options

When you install macOS from Recovery, you get the current version of the most recently installed macOS, with some exceptions:

  • On an Intel-based Mac: If you use Shift-Option-Command-R during startup, you're offered the macOS that came with your Mac, or the closest version still available. If you use Option-Command-R during startup, in most cases you're offered the latest macOS that is compatible with your Mac. Otherwise you're offered the macOS that came with your Mac, or the closest version still available.
  • If the Mac logic board was just replaced, you may be offered only the latest macOS that is compatible with your Mac. If you just erased your entire startup disk, you may be offered only the macOS that came with your Mac, or the closest version still available.

You can also use these methods to install macOS, if the macOS is compatible with your Mac:

  • Use the App Store to download and install the latest macOS.
  • Use the App Store or a web browser to download and install an earlier macOS.
  • Use a USB flash drive or other secondary volume to create a bootable installer.
-->

Intune lets you manage macOS devices to give users access to company email and apps.

As an Intune admin, you can set up enrollment for company-owned macOS devices and personally owned macOS devices ('bring your own device' or BYOD).

Prerequisites

Complete the following prerequisites before setting up macOS device enrollment:

  • Make sure your device is eligible for Apple device enrollment.
  • Assign user licenses in the Microsoft 365 admin center

User-owned macOS devices (BYOD)

You can let users enroll their own personal devices into Intune management. This is known as 'bring your own device' or BYOD. After you've completed the prerequisites and assigned user licenses, your users can enroll their devices by:

  • Going to the Company Portal website or
  • Downloading the Mac Company Portal app at aka.ms/EnrollMyMac.

You can also send your users a link to online enrollment steps: Enroll your macOS device in Intune.

For information about other end-user tasks, see these articles:

Company-owned macOS devices

For organizations that purchase devices for their users, Intune supports the following macOS company-owned device enrollment methods:

  • Apple's Automated Device Enrollment (ADE): Organizations can purchase macOS devices through ADE. ADE lets you deploy an enrollment profile 'over the air' to bring devices into management.
  • Device enrollment manager (DEM): You can use a DEM account to enroll up to 1,000 devices.
  • Direct enrollment: Direct enrollment does not wipe the device.
Mac

Block macOS enrollment

By default, Intune lets macOS devices enroll. To block macOS devices from enrollment, see Set device type restrictions.

Enroll virtual macOS machines for testing

Note

macOS virtual machines are only supported for testing. You should not use macOS virtual machines as production devices for your end users.

You can enroll macOS virtual machines for testing using either Parallels Desktop or VMware Fusion.

For Parallels Desktop, you need to set the hardware type and the serial number for the virtual machines so that Intune can recognize them. Follow Parallels' instructions for setting hardware type and serial number to set up the necessary settings for testing. We recommend that you match the hardware type of the device running the virtual machines to the hardware type of the virtual machines that you're creating. You can find this hardware type in Apple menu > About this Mac > System Report > Model Identifier.

For VMware Fusion, you need to edit the .vmx file to set the virtual machine's hardware model and serial number. We recommend that you match the hardware type of the device running the virtual machines to the hardware type of the virtual machines that you're creating. You can find this hardware type in Apple menu > About this Mac > System Report > Model Identifier.

User Approved enrollment

User Approved MDM enrollment is a type of macOS enrollment that you can use to manage certain security-sensitive settings. For more information, see Apple's support documentation.

As of June 2020, all new macOS MDM enrollments in Intune, including those not done through Automated Device Enrollment (ADE), are considered user approved. The end-user must manually install the management profile in System Preferences > Profiles, and thus provide approval of the management profile. System Preferences is launched automatically from the Company Portal app for BYOD macOS users. Instructions to install the management profile are provided in the Company Portal app.

BYOD macOS MDM enrollments prior to June 2020 may not be user approved if the end-user did not manually provide approval of the management profile in System Preferences > Profiles. For BYOD enrollments after June 2020, the Company Portal app launches System Preferences for the user and the user will need to select Install. If the user did not approve the management profile during enrollment, the user can go to System Preferences > Profiles, choose the management profile, and select Approve to approve the profile at a later point in time.

Find out if a device is User Approved

  1. Sign in to the Microsoft Endpoint Manager admin center.
  2. Choose Devices > All devices> choose the device > Hardware.
  3. Check the User approved enrollment field.

Next steps

Inure Mac Os Catalina

After macOS devices are enrolled, you can create custom settings for macOS devices.