Skip to content

Commit 5f72b47

Browse files
committed
Removed Apple procedure because it exists on Apple Support
1 parent 712819b commit 5f72b47

1 file changed

Lines changed: 3 additions & 31 deletions

File tree

memdocs/intune/enrollment/macos-enroll.md

Lines changed: 3 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -90,40 +90,12 @@ The bootstrap token is automatically generated when:
9090
The token is then automatically escrowed to Microsoft Intune. You can use a command line tool to manually view, generate, and escrow a bootstrap token, if needed. For more information, see [Use secure token, bootstrap token, and volume ownership in deployments](https://support.apple.com/guide/deployment/use-secure-and-bootstrap-tokens-dep24dbdcf9e/1/web/1.0) on Apple Support.
9191

9292
### Manage kernel extensions
93-
A bootstrap token can be used to approve the installation of both kernel extensions and software updates on a Mac with Apple silicon. Kernel extenstion management is automatically available on Macs running macOS 11 or later and enrolled via automated device enrollment.
93+
A bootstrap token can be used to approve the installation of both kernel extensions and software updates on a Mac with Apple silicon. Kernel extension management is automatically available on Macs running macOS 11 or later and enrolled via automated device enrollment.
9494

95-
To enable it on a device that wasn't enrolled via automated device enrollment, you must restart the device in recoveryOS and downgrade its security settings. Shut down the device and then complete these steps as the device reboots:
96-
97-
1. Press and hold the power button until you see **Loading startup options**.
98-
99-
2. Select **Options** > **Continue**.
100-
101-
3. If requested, enter the administrator account's password.
102-
103-
4. The Mac enters recovery mode and opens macOS Recovery. Select **Utilities** > **Startup Security Utility**.
104-
105-
5. Select the startup disk you want to use for the security policy. If the disk is encrypted with FileVault:
106-
a. Select Unlock.
107-
b. Enter the password.
108-
c. Select Unlock.
109-
110-
6. Select **Security Policy**.
111-
112-
7. From the security options, select **Reduced Security**.
113-
8. Enter the administrator's username and password.
114-
9. Select from the available settings. Your options:
115-
- **Allow user management of kernel extensions from identified developers**: Select the checkbox to allow local users to approve the installation of software that uses legacy kernel extensions.
116-
- **Allow remote management of kernel extensions and automatic software updates**: Select the checkbox to authorize remote management of legacy kernel extensions and software updates in Intune.
117-
118-
9. Select **OK**.
119-
120-
10. Restart your Mac for the changes to take effect.
121-
122-
> [!TIP]
123-
> If you have problems starting up your Mac with Apple silicon, and think the problem is caused by third-party software installed on the device, try starting your Mac in safe mode.
95+
To authorize the remote management of kernel extensions on a device that isn't enrolled via automated device enrollment, you must restart the Mac in recovery mode and downgrade its security settings. For more information, see [Change security settings on the startup disk of a Mac with Apple silicon](https://support.apple.com/guide/mac-help/change-security-settings-startup-disk-a-mac-mchl768f7291/mac) on Apple Support.
12496

12597
## Block macOS enrollment
126-
By default, Intune lets macOS devices enroll. To block macOS devices from enrollment, see [Set device type restrictions](enrollment-restrictions-set.md).
98+
By default, Intune lets macOS devices enroll. To block macOS devices from enrollment, see [Set device type restrictions](enrollment-restrictions-set.md).
12799

128100
## Enroll virtual macOS machines for testing
129101

0 commit comments

Comments
 (0)