[ In Endpoint Manager ]

1. Select Tenant administration > Connectors and tokens > Apple VPP Tokens.

2. To the right of the VPP token, select the … > select Sync.

[ In Endpoint Manager ]

1. Select Groups > All groups > New Group

2. Enter the following:

Group name: iPad app - <AppName> (e.g. iPad app - Green Screen)

Group description: iPads to deploy <AppName> app to.

Membership type: Assigned

3. Under Members > select No members selected.

4. Select the iPads to add to the group > Select > Create.

5. Complete the instructions Deploying Apps to complete the deployment. 

[ In Endpoint Manager ]

1. Select Apps > All apps > select app for deployment.

2. Select Properties > scroll down to Assignments > Edit.

3. Under Required, select + Add group > select group(s) to deploy to.

4. Select  > Review + save > Save.

[ In Endpoint Manager ]

1. Select Devices > iOS/iPadOS > select the device to sync > along the top bar, select Sync.

Checking the MDM token:

[ In Endpoint Manager ]

https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/DevicesIosMenu/~/iosEnrollment

1. Select Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple MDM Push Certificate.

2. Check the field named Expiration.

Checking the VPP token:

[ In Endpoint Manager ]

https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/TenantAdminConnectorsMenu/~/appleVpp

1. Select Tenant administration > Connectors and tokens > Apple VPP Tokens.

1. At the existing entry, scroll across to the column Expiration date. 

[ In Apple School Manager ]

1. In the bottom-left, open the profile menu > select Preferences > Payments and Billing.

2. Under Content Tokens, select Download.

[ In Endpoint Manager ]

1. Navigate here

OR manually navigate: Select Tenant administration > Connectors and tokens > Apple VPP Tokens.

2. Select the existing entry > under Basics, select Edit.

3. Under VPP token file, select the browse icon > select the downloaded VPP token.

4. Select Review + save > Save.

[ In Endpoint Manager ]

1. Navigate here > select Apple MDM Push Certificate.

OR manually navigate: Select Devices > iOS/iPadOS > iOS/iPadOS enrollment > Apple MDM Push Certificate.

2. In step 2, select Download your CSR.

3. In step 3, select Create your MDM push Certificate.

[ In Apple Push Certificates Portal ]

4. Sign in with your Apple School Manager account.

5. Select Renew > Choose File > select downloaded file from step 2 > Upload.

6. Select Download.

[ In Endpoint Manager ]

7. In step 4, enter the same Apple ID that your logged in previously.

8. In step 5, select the downloaded file from the Apple Push Certificates Portal > Upload.

[ In Apple School Manager ]

1. In the bottom-left, open the profile menu > select Preferences.

2. Under Your MDM Servers, select the MDM server to renew (normally named Interm IT Intune MDM).

3. At the top, select Download MDM Server Token.

[ In Endpoint Manager ]

1. Navigate here

OR manually navigate: Select Devices > iOS/iPadOS > under Device onboarding, select Enrollment > Enrollment program tokens.

2. Select the enrollment token to renew (normally named Interm IT Intune MDM).

3. Select Renew token.

4. Under Apple token, select the browse icon > select the downloaded token > Next > Create.

When purchasing new iPads, they can be pre-added to the school's Apple School Manager. If the iPads have been delivered already, there is a 60 day window to complete the process.

[ In Apple School Manager ]

1. In the bottom-left, open the profile menu > select Preferences.

2. Under Your MDM Servers, select MDM Server Assignment > under Customer Numbers, select Edit.

3. In the dropdown Customer Number Type, select Reseller Number.

4. In the Reseller Number, enter the reseller's number (speak with purchasing@ to obtain it if you do not have this) > select Add.

Reseller codes:

• XMA - 354BF80

• MCC Digital - 6F2EA0

[ In Endpoint Manager ]

1. Navigate here

OR manually navigate: Select Devices > iOS/iPadOS > under Device onboarding, select Enrollment > Enrollment program tokens.

2. Select the enrollment token to renew (normally named Interm IT Intune MDM).

3. Select Renew token.

4. Under Apple token, select the browse icon > select the downloaded token > Next > Create.

Updated June 2025

• Minimum allowed iOS version: iOS 13 (changing to iOS 14 when iOS 26 is released).

• Minimum supported iOS version: iOS 17. Supported devices can be viewed here:

  • https://support.apple.com/guide/iphone/iphone-models-compatible-with-ios-17-iphe3fa5df43/17.0/ios/17.0

  • https://support.apple.com/guide/ipad/ipad-models-compatible-with-ipados-17-ipad213a25b2/17.0/ipados/17.0

Intune-managed iPads that cannot update to iOS 14 will still function, but they are officially out of the support cycle. This means some existing and new Intune features may not be supported.

As a rule:

• Minimum supported iOS: 3 latest iOS releases.

• Minimum allowed iOS: 3 iOS releases prior to the minimum supported version.

Please use the above information to help with planning device replacements, upgrades and Intune setups for older unmanaged devices.

Symptoms

When attempting to transfer photos and videos from an iPad to PC, this error shows "A device attached to the system is not functioning"

Fix

Settings > Photos > Transfer to Mac or PC, select "Keep Originals"

Source

https://discussions.apple.com/thread/8371974

Symptoms

When attempting to transfer photos and videos from an iPad to PC, this error shows "A device attached to the system is not functioning"

To: 

Subject:

Hello,

Please can the following TXT record be added for <School Name>:

Domain: <School Domain>

Name / Host / Alias: @

Value / Answer / Destination: apple-domain-verification=XXXXXXXXXXXXXXX

Thank you.

apple-domain-verification=o4cSOflzhIxXtB3T