MD-102 · Question #323
You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices. You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent…
The correct answer is A. Create a device configuration profile. E. Enroll the devices in Microsoft Intune by using Apple Business Manager. To deploy specific iOS updates and prevent users from manually installing newer versions on unmanaged iPads, devices must be enrolled via Apple Business Manager and then configured using a device configuration profile in Intune.
Question
You have a Microsoft 365 E5 subscription and 100 unmanaged iPad devices. You need to deploy a specific iOS update to the devices. Users must be prevented from manually installing a more recent version of iOS. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- ACreate a device configuration profile.
- BEnroll the devices in Microsoft Intune by using the Intune Company Portal.
- CCreate a compliance policy.
- DCreate an iOS app provisioning profile.
- EEnroll the devices in Microsoft Intune by using Apple Business Manager.
How the community answered
(37 responses)- A76% (28)
- B16% (6)
- C5% (2)
- D3% (1)
Why each option
To deploy specific iOS updates and prevent users from manually installing newer versions on unmanaged iPads, devices must be enrolled via Apple Business Manager and then configured using a device configuration profile in Intune.
A device configuration profile in Microsoft Intune allows administrators to define policies for managing iOS updates, including deferring updates and specifying a target operating system version, thus preventing users from installing more recent versions.
Enrolling devices using the Intune Company Portal typically results in user-driven enrollment, which offers less extensive management capabilities for iOS updates compared to supervised devices enrolled via Apple Business Manager.
A compliance policy defines rules that devices must meet (e.g., minimum OS version) and reports non-compliance, but it does not directly deploy specific updates or prevent users from installing newer versions.
An iOS app provisioning profile is used for signing and deploying custom applications to devices, not for managing or deploying operating system updates.
Enrolling devices through Apple Business Manager (ABM) with Automated Device Enrollment (ADE) provides a supervised device state, which is necessary for granular control over iOS updates and enforcing specific OS versions and update deferrals via Intune.
Concept tested: iOS device enrollment and update management with Intune and Apple Business Manager
Source: https://learn.microsoft.com/en-us/mem/intune/enrollment/ios-mac-dep-set-up
Topics
Community Discussion
No community discussion yet for this question.