Notes from Custom App Distribution and Device Management lab (Friday, June 11th)

Question: Will be able to manually add macOS Monterey devices into Automated Device Enrollment similarly to how we can manually add iOS devices using Apple Configurator?

Answer: Use Apple Configurator for iPhone for this. For more information, please see the following link for the Manage Devices with Apple Configurator" session video : https://developer.apple.com/wwdc21/10297

Question: Will Apple provide a way to configure Automated Device Enrollment so that macOS Monterey Macs cannot skip the device enrollment process?

Answer: Not at this time. please submit feedback if you want this feature.

Question: Will Apple provide a method of being able to re-trigger the enrollment check at the macOS Monterey Setup Assistant if the remote management screen does not appear? Reasons it may not appear may include network issues, device was incorrectly assigned in Apple Business Manager or Apple School Manager, MDM issues etc.

Answer: This should be do-able. Please submit feedback if you want this feature. This also sounds like a good idea to iOS, please submit feedback if you want to see this feature on iOS as well.

It was suggested that the feature to trigger the re-checkin should only be available on the Setup Assistant screen which appears in place of the Remote Setup screen. The reason is that, if you get further into Setup Assistant, you may set up your account or make choices for your Mac's settings which conflict with the settings your MDM server has for Automated Device Enrollment.

Question: What are Apple's plans, if any, to support using Apple's own two-factor authentication system (not the two step one which uses SMS) to log into a Mac running macOS?

Answer: Apple does not discuss future plans. Please submit feedback if you want this feature. Apple School Manager does include the ability to generate verification codes. If you want to have Apple Business Manager support a similar feature for ABM's Managed Apple IDs, please submit feedback for this feature.

Question: What are Apple’s plans, if any, to support Azure AD workplace join as a replacement for on-premise Active Directory binding?

Answer: Apple does not comment on future plans. Please submit feedback if you want this feature.