MC878427: Restricted Content Discoverability for SharePoint Sites

Announcement ID	MC777834		Published Date	04-15-2024
Service	Intune		Last Updated	05-08-2024
Category	Plan for change		Expiration Date	07-29-2024
Roadmap ID			Action Required by Date
Tags	Admin impact, User impact

Summary
Starting in June 2024, Intune Company Portal will change the registration process for Apple devices; registration will occur after enrollment. Users must return to the Company Portal to complete registration, affecting dynamic groups. Existing devices are not impacted. Preparation involves updating guidance and considering alternative enrollment methods or assignment filters.

More Information

Starting in June 2024 (previously mid-May), or soon after, we will be changing the registration process for Apple devices enrolled with Intune Company Portal. Previously, registration occurred during enrollment. With this change, registration will occur after the enrollment is completed. Important: This means that for dynamic groups to be utilized, users must complete registration by returning to the Company Portal. How this will affect your organization: Existing enrolled devices are not impacted. For new user or device enrollments that utilize the Company Portal, users will need to return to the Company Portal to complete registration: For iOS users: Users with notifications enabled will receive a prompt to return to the Company Portal. If they have turned off notifications, they will not be alerted but still need to return to Company Portal to complete registration. For macOS devices: The Company Portal for macOS will detect the installation of the management profile and automatically complete the registration unless it is manually closed by the user, in which case it will need to be re-opened.  If you are using dynamic groups, which rely on device registration, it is important for users to complete the device registration. There is no change to the user interface, once a user has completed downloading the management profile and return to the Company Portal, they will see the "You're all set!" message as shown below: Note: If you are using Conditional Access (CA) policies, no action is required. If a user has not completed registration and attempts to login to a CA protected app, they will be prompted to return to the Company Portal to complete registration. What you need to do to prepare: Update your user guidance and admin documentation as needed. Additionally, you have the following options to minimize impact to your users: Move to web enrollment with just in time registration, as this handles registration automatically during normal device usage. Enable CA policies to ensure users return to the Company Portal to register if they did not complete this step during enrollment. Migrate from dynamic groups to assignment filters to achieve the same capabilities without the dependency on device registration.