Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallYes, but only for one specific Intune method. Microsoft Intune offers Web-based device enrollment for personal and BYOD iPhones and iPads. In that flow, the user opens the web version of Company Portal in Safari, downloads an Apple management profile, and approves it in iOS or iPadOS Settings. Other Intune methods—including Company Portal enrollment, account-driven Apple User Enrollment, and Automated Device Enrollment—use different workflows.
Microsoft’s current documentation lists iOS/iPadOS 15 or later for web-based enrollment. Devices on iOS/iPadOS 14.9 or earlier can be directed to app-based enrollment instead, which requires the Company Portal app.
What “web-based enrollment” means
“Web-based” describes how enrollment starts; it does not replace Apple’s management-profile and MDM framework. Safari and the web Company Portal are used to authenticate the user and obtain the profile. The profile is then installed through Settings, where Apple completes enrollment.
- Web-based device enrollment: Safari and the web version of Company Portal; the iOS/iPadOS Company Portal app is not required.
- Company Portal enrollment: the user installs and uses the Intune Company Portal app.
- Account-driven Apple User Enrollment: a privacy-focused BYOD workflow initiated mainly through Settings and work-account sign-in.
- Automated Device Enrollment: corporate devices enroll during Apple Setup Assistant through Apple Business Manager or Apple School Manager.
- Apple Configurator: a manual workflow for eligible organization-owned devices.
See Microsoft’s web-based enrollment documentation and Apple personal-device comparison.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- WHY IPAD — The 11-inch iPad is now more capable than ever with the superfast A16 chip, a stunning Liquid Retina display, advanced cameras, fast Wi-Fi, USB-C connector, and four gorgeous colors.* iPad delivers a powerful way to create, stay connected, and get things done.
- PERFORMANCE AND STORAGE — The superfast A16 chip delivers a boost in performance for your favorite activities. And with all-day battery life, iPad is perfect for playing immersive games and editing photos and videos.* Storage starts at 128GB and goes up to 512GB.*
- 11-INCH LIQUID RETINA DISPLAY — The gorgeous Liquid Retina display is an amazing way to watch movies or draw your next masterpiece.* True Tone adjusts the display to the color temperature of the room to make viewing comfortable in any light.
- IPADOS + APPS — iPadOS makes iPad more productive, intuitive, and versatile. With iPadOS, run multiple apps at once, use Apple Pencil to write in any text field with Scribble, and edit and share photos.* iPad comes with essential apps like Safari, Messages, and Keynote, with over a million more apps designed specifically for iPad available on the App Store.
- FAST WI-FI CONNECTIVITY — Wi-Fi 6 gives you fast access to your files, uploads, and downloads, and lets you seamlessly stream your favorite shows.
Who should use it?
Web-based enrollment is primarily for personal iPhones and iPads in a BYOD program. It suits organizations that need device enrollment for access to managed email, applications, Wi-Fi, certificates, compliance policies, or Conditional Access, but do not want to make users install Company Portal.
It is not normally the right choice for a fully managed company-owned device. Corporate hardware generally belongs in Automated Device Enrollment, where supervision and stronger controls can be applied during Setup Assistant. Microsoft describes that model in its Automated Device Enrollment overview.
Requirements and dependencies
- Microsoft Intune must be configured with the required MDM authority.
- The tenant needs an active Apple MDM Push certificate.
- Microsoft’s current requirement is iOS/iPadOS 15 or later.
- The intended users must receive a web-based enrollment profile and must not be blocked by enrollment restrictions.
- Safari is the supported browser for downloading the management profile.
- Microsoft Authenticator and Apple single sign-on extension should be configured when using Just-in-Time (JIT) registration.
- Any existing MDM relationship on the device may need to be removed by the previous administrator before enrollment can proceed.
JIT registration is an additional configuration dependency, not an automatic consequence of choosing web-based enrollment. It registers the device with Microsoft Entra ID, reduces repeated sign-ins, and enables single sign-on in supported work apps. Follow Microsoft’s account-driven setup guidance and Apple User Enrollment guidance.
How an administrator creates the profile
- Sign in to the Microsoft Intune admin center.
- Open Devices > Enrollment.
- Select the Apple tab.
- Under Enrollment options, select Enrollment types.
- Select Create profile > iOS/iPadOS.
- Enter a profile name and description.
- On Settings, set Enrollment type to Web based device enrollment.
- Assign the profile to the intended users or user group.
- Review the configuration and select Create.
- Check priority if a user could receive multiple enrollment profiles; Intune applies the higher-priority profile.
Portal labels can change. If the layout differs, use the equivalent Apple > Enrollment types area. The complete procedure is in Microsoft’s current setup article.
Rank #2
- WHY IPAD — The 11-inch iPad is now more capable than ever with the superfast A16 chip, a stunning Liquid Retina display, advanced cameras, fast Wi-Fi, USB-C connector, and four gorgeous colors.* iPad delivers a powerful way to create, stay connected, and get things done.
- PERFORMANCE AND STORAGE — The superfast A16 chip delivers a boost in performance for your favorite activities. And with all-day battery life, iPad is perfect for playing immersive games and editing photos and videos.* Storage starts at 128GB and goes up to 512GB.*
- 11-INCH LIQUID RETINA DISPLAY — The gorgeous Liquid Retina display is an amazing way to watch movies or draw your next masterpiece.* True Tone adjusts the display to the color temperature of the room to make viewing comfortable in any light.
- IPADOS + APPS — iPadOS makes iPad more productive, intuitive, and versatile. With iPadOS, run multiple apps at once, use Apple Pencil to write in any text field with Scribble, and edit and share photos.* iPad comes with essential apps like Safari, Messages, and Keynote, with over a million more apps designed specifically for iPad available on the App Store.
- FAST WI-FI CONNECTIVITY — Wi-Fi 6 gives you fast access to your files, uploads, and downloads, and lets you seamlessly stream your favorite shows.
What the user does on an iPhone or iPad
- Open the Intune Company Portal website in Safari.
- Sign in with the work or school account.
- Select the device and start enrollment.
- Follow the instructions to download the management profile.
- Open iOS/iPadOS Settings and open the downloaded profile or device-management prompt.
- Approve installation of the management profile.
- Return to the browser or requested work application and finish the remaining prompts.
- Wait for Intune to evaluate compliance and apply assigned policies.
Apple and Microsoft can change prompt wording and Settings locations between releases. Safari remains the supported browser for this workflow; starting in Chrome or Edge can produce an unsupported or incomplete profile-download experience.
What Intune can manage—and what it cannot
Web-based enrollment is a limited, BYOD-oriented form of device management. The device is not supervised, and enrollment does not require erasing it. Personal applications and data remain outside the organization’s intended managed work-data boundary, but enrollment is still device management: policies can affect settings, access, compliance, and managed resources.
Available controls depend on Apple capabilities and the policies your administrator assigns. Web enrollment does not provide the breadth of supervision, inventory, restrictions, and organization-wide controls available through Automated Device Enrollment.
Do not interpret “privacy-oriented” as “IT cannot see anything personal.” The exact information and actions available depend on Intune policy, Apple’s framework, and organizational configuration. Explain the organization’s data-collection and wipe rules before asking employees to enroll.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsRank #3
- WHY IPAD — The 11-inch iPad is now more capable than ever with the superfast A16 chip, a stunning Liquid Retina display, advanced cameras, fast Wi-Fi, USB-C connector, and four gorgeous colors.* iPad delivers a powerful way to create, stay connected, and get things done.
- PERFORMANCE AND STORAGE — The superfast A16 chip delivers a boost in performance for your favorite activities. And with all-day battery life, iPad is perfect for playing immersive games and editing photos and videos.* Storage starts at 128GB and goes up to 512GB.*
- 11-INCH LIQUID RETINA DISPLAY — The gorgeous Liquid Retina display is an amazing way to watch movies or draw your next masterpiece.* True Tone adjusts the display to the color temperature of the room to make viewing comfortable in any light.
- IPADOS + APPS — iPadOS makes iPad more productive, intuitive, and versatile. With iPadOS, run multiple apps at once, use Apple Pencil to write in any text field with Scribble, and edit and share photos.* iPad comes with essential apps like Safari, Messages, and Keynote, with over a million more apps designed specifically for iPad available on the App Store.
- FAST WI-FI CONNECTIVITY — Wi-Fi 6 gives you fast access to your files, uploads, and downloads, and lets you seamlessly stream your favorite shows.
If the only requirement is protecting Microsoft 365 data inside supported apps, app protection policies may be preferable to enrolling the entire device.
How it compares with other choices
| Method | Best fit | User experience | Company Portal app | Supervision | Erase required |
|---|---|---|---|---|---|
| Web-based device enrollment | Personal/BYOD | Web Company Portal, Safari, Settings | No | No | No |
| Device enrollment with Company Portal | Personal/BYOD using the traditional workflow | Company Portal app plus Settings | Yes | No | No |
| Account-driven Apple User Enrollment | Privacy-focused modern BYOD | Work sign-in and Settings | No; Authenticator is used | No | No |
| User Enrollment with Company Portal | Existing legacy BYOD deployments | Company Portal, Safari, Settings | Yes | No | No |
| Automated Device Enrollment | Corporate-owned devices | Apple Setup Assistant | Depends on authentication configuration | Yes | Usually new or wiped device |
| Apple Configurator | Manual organization-owned enrollment | Configurator-assisted setup | Depends on configuration | Configuration-dependent | Often used for preparation |
Microsoft says Company Portal-based Apple User Enrollment is deprecated for newly enrolled devices and recommends account-driven Apple User Enrollment for new deployments; existing legacy devices remain supported. See the User Enrollment methods page and the legacy setup page.
Choose the method by ownership and required control
Choose web-based device enrollment when
- The device is personal or BYOD.
- Users should not install Company Portal.
- Non-supervised, limited management is acceptable.
- Users can complete the flow in Safari.
- Device enrollment, JIT registration, or SSO is needed rather than app-only protection.
Choose account-driven Apple User Enrollment when
- Privacy separation is the priority.
- The device is personal and management needs are limited.
- The organization accepts that many device-wide controls are unavailable.
Choose Automated Device Enrollment when
- The device is corporate-owned and sourced through Apple Business Manager or Apple School Manager.
- Supervision, zero-touch setup, or stronger anti-removal controls are required.
Choose app protection policies when
- Only organizational data inside supported apps needs protection.
- Full MDM enrollment would create unnecessary privacy or support concerns.
Troubleshooting common failures
The enrollment profile does not appear
- Confirm the user is included in the profile assignment.
- Check that the profile is enabled and targets iOS/iPadOS.
- Review profile priority for an overriding assignment.
- Check enrollment restrictions and the device OS version.
Company Portal is unexpectedly required
Common explanations are iOS/iPadOS 14.9 or earlier, assignment to a Company Portal profile, use of a legacy path, or a web-based profile being overridden. Microsoft documents the older-version fallback in its web enrollment article.
The profile will not download
- Use Safari and verify that Safari is not restricted.
- Confirm the correct work account is signed in.
- Restart the enrollment session if its link or web session expired.
- Check for a stale profile from a previous enrollment.
Remove an existing profile only under the organization’s instructions: doing so can remove corporate access or managed data.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Rank #4
- WHY IPAD PRO — iPad Pro with the Apple M5 chip delivers extraordinary performance for effortless productivity on a stunning display. Take on pro workflows with Neural Accelerators for AI and a redesigned iPadOS with game-changing capabilities.*
- PERFORMANCE AND STORAGE — iPad Pro with M5 brings next-generation speed and the power of on-device AI to all your tasks.* Featuring up to 2TB of storage, 16GB of memory, and Neural Accelerators for next-level AI performance.*
- IPADOS — Run pro apps and get more done with iPadOS 26 with Liquid Glass design and game-changing capabilities.* With an intuitive and flexible windowing system, you can control, organize, and manage your workflows like never before.
- APPLE INTELLIGENCE — Apple Intelligence is the personal intelligence system that helps you communicate, express yourself, and get things done effortlessly with groundbreaking privacy protections at every step.*
- 11-INCH ULTRA RETINA XDR DISPLAY — The world’s most advanced display, featuring extreme brightness, precise contrast, ProMotion, P3 wide color, and True Tone.* Nano-texture display glass available in 1TB and 2TB configurations
Enrollment succeeds but apps remain blocked
- Verify Microsoft Entra registration and compliance status.
- Check JIT registration, the Apple SSO extension, and Authenticator assignment.
- Confirm Conditional Access requirements and application assignments.
Another MDM profile is installed
A device managed by another provider may not be eligible for this enrollment. Confirm ownership and have the previous provider remove its management relationship through an authorized process; do not bypass organization-owned controls.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Bottom line
Intune iOS/iPadOS enrollment is not universally web-based. The specific Web based device enrollment profile is a Safari-driven, non-supervised BYOD method for iOS/iPadOS 15 or later. Use it when personal-device enrollment is needed without the Company Portal app; use account-driven User Enrollment for a more privacy-focused Apple model, Automated Device Enrollment for supervised corporate devices, and app protection when device enrollment is unnecessary.
Frequently Asked Questions
Is the Intune Company Portal app required?
Not for the Web based device enrollment profile. Microsoft Authenticator may still be needed for recommended Just-in-Time registration.
Can users enroll through Chrome or Edge?
Safari is Microsoft’s supported browser for downloading the management profile. Other browsers may not provide the supported flow.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Best Value
- Smart Connector. 3.5 mm headphone jack. Stereo speakers. On/Off - Sleep/Wake. Home/Touch ID sensor. Dual microphones. Volume up/down. Nano-SIM tray (cellular models). Lightning connector
- A10 Fusion chip.
- Touch ID fingerprint sensor,
- 8MP back camera, 1. 2MP FaceTime HD front camera.
- Stereo speakers.
Does web-based enrollment supervise the device?
No. It is a non-supervised BYOD enrollment method.
Does the iPhone or iPad need to be erased?
No. Web-based enrollment is designed to enroll an existing personal device without a reset.
What versions are supported?
Microsoft’s current documentation lists iOS/iPadOS 15 or later. Older devices can fall back to app-based enrollment.
Is it suitable for company-owned devices?
Usually not. Evaluate Automated Device Enrollment through Apple Business Manager or Apple School Manager for corporate-owned hardware.
Does Microsoft Authenticator still matter?
Yes. It is commonly part of JIT registration and SSO even though Company Portal is not required.
Free tools Windows power users keep installed
One-click scans. No signup required.
Can administrators manage personal photos and apps?
The method is designed to protect personal data and apps with limited management, but exact visibility and controls depend on Intune policies and Apple capabilities.
What should be used if only Microsoft 365 app data needs protection?
Consider Intune app protection policies instead of full device enrollment.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
