MT.1093 - Apple Automated Device Enrollment Tokens should be valid for more than 30 days
Overview
This test checks if the Apple ADE token is valid and not expired. The Apple Automated Device Enrollment (ADE) token is required to synchronize Apple devices with Microsoft Intune. The token has a lifetime of one year and needs to be renewed to allow synchronization.
Remediation action
See the Microsoft learn instructions to Renew enrollment program token.
Direct Link for Intune Portal - Enrollment program tokens.
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1093 |
| Severity | High |
| Suite | Maester |
| Product | Intune |
| Feature | Tenant administration |
| Area | Devices and endpoints |
| Resource type | Connector |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtAppleAutomatedDeviceEnrollmentToken |
| Services | Graph |
| Compatible licenses | INTUNE_A |
Source
- Test:
tests/maester/intune/Test.MT.1093.ps1 - Documentation:
tests/maester/intune/Test.MT.1093.md