Apple Automated Device Enrollment Tokens should be valid for more than 30 days
MT.1093HighIntuneTenant administration
Part of Maester · Intune · Tenant administration · All checks
Invoke-Maester -TestId MT.1093Overview
Section titled “Overview”This test checks if the Apple ADE token is valid and not expired. The Apple Automated Device Enrollment (ADE) token is required to synchronize Apple devices with Microsoft Intune. The token has a lifetime of one year and needs to be renewed to allow synchronization.
Remediation action
Section titled “Remediation action”See the Microsoft learn instructions to Renew enrollment program token.
Direct Link for Intune Portal - Enrollment program tokens.
Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | MT.1093 |
| Severity | High |
| Suite | Maester |
| Product | Intune |
| Feature | Tenant administration |
| Area | Devices and endpoints |
| Resource type | Connector |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtAppleAutomatedDeviceEnrollmentToken |
| Services | Graph |
| Compatible licenses | INTUNE_A |
Source
Section titled “Source”- Test:
tests/maester/intune/Test.MT.1093.ps1 - Documentation:
tests/maester/intune/Test.MT.1093.md