Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstalliTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To automatically install Microsoft Intune Company Portal on organization-owned iPhones enrolled through Apple Automated Device Enrollment (ADE), deploy the app from Intune as a required, device-licensed Volume Purchase Program (VPP) app, select Install Company Portal with VPP in the ADE enrollment profile, and enable automatic app updates for the associated Apple Business Manager location token. This installs the app without asking users for an Apple ID. Devices already enrolled need a separate deployment workflow.
Before you configure the deployment
Apple’s former Volume Purchase Program is integrated into Apple Business Manager. Intune uses an uploaded Apple Business Manager location token to sync apps and licenses. A location token is valid for one year, so plan to renew and sync it before it expires. Microsoft’s guide to managing Apple VPP apps in Intune explains the token and licensing workflow.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Apple iPhone 14, 128GB, Midnight - Unlocked (Renewed) | $300.00 | Buy on Amazon |
| 2 |
|
Apple iPhone 16, 128GB, Pink - Unlocked (Renewed) | $552.01 | Buy on Amazon |
| 3 |
|
Apple iPhone 15, 128GB, Black - Unlocked (Renewed) | $398.00 | Buy on Amazon |
| 4 |
|
Apple iPhone 13, 128GB, Midnight - Unlocked (Renewed) | $262.00 | Buy on Amazon |
| 5 |
|
Apple iPhone 16e, 128GB, Black - Unlocked (Renewed) | $388.00 | Buy on Amazon |
- In Apple Business Manager, acquire the Company Portal app license and associate it with the location you use for Intune.
- Download that location’s VPP token, then upload or synchronize it in Intune. Intune uses the token to sync app names, metadata, and license counts.
- In Intune, confirm Company Portal is available from the synchronized app catalog and that the relevant location token is active.
Configure Company Portal for new ADE enrollments
1. Set the app assignment to Required with device licensing
In Intune, assign Company Portal to the device group that will receive the ADE enrollment profile. Set the assignment intent to Required and use device licensing. Required directs installation; an Available assignment waits for a user to initiate installation. Device licensing associates the app license with the iPhone and does not require an App Store sign-in.
2. Select VPP installation in the ADE enrollment profile
Configure the ADE enrollment profile for the applicable device enrollment program and select Install Company Portal with VPP. Microsoft documents this option as the way to include Company Portal during enrollment without requiring a user Apple ID for the app installation. Follow the current profile workflow in Microsoft’s iOS/iPadOS enrollment guide; exact admin-center labels may change.
#1 Best Overall
- This phone is unlocked and compatible with any carrier of choice on GSM and CDMA networks (e.g. AT&T, T-Mobile, Sprint, Verizon, US Cellular, Cricket, Metro, Tracfone, Mint Mobile, etc.).
- Please check with your carrier to verify compatibility.
- The device does not come with headphones or a SIM card. It does include a generic (Mfi certified) charging cable.
- Tested for battery health and guaranteed to have a minimum battery capacity of 80%.
3. Enable automatic app updates for the location token
In the Apple Business Manager token settings in Intune, set Automatic app updates to Yes. Microsoft identifies this setting as the mechanism for automatic Company Portal updates on ADE devices. Device-licensed VPP apps are installed and updated through the MDM channel, rather than by asking each user to update the app through an App Store account.
4. Choose the enrollment authentication method
Choose the ADE authentication method to match how users should complete setup. Setup Assistant with modern authentication is supported on iOS/iPadOS 13.0 and later and allows users to access parts of the device even if Company Portal has not installed yet. Company Portal authentication is another option when you want users to authenticate through the app during setup. See Microsoft’s ADE authentication-method guidance.
Rank #2
- 6.1" Super Retina XDR OLED, HDR10, Dolby Vision, 1000nits (typ), 2000nits (HBM), 2556x1179px at 460ppi, 3561mAh Battery
- 128GB 8GB RAM, Apple A18 (3nm), Hexa-core (2x4.04 GHz + 4x2.20 GHz), Apple GPU 5-core, 16‑core Neural Engine
- Rear camera: 48MP, f/1.6, wide + 12MP, f/2.2, ultrawide, Front Camera: 12MP, f/1.9, wide, iOS 18, upgradable to iOS 18.5
- 4G LTE: 1/2/3/4/5/7/8/12/13/14/17/18/19/20/25/26/28/29/30/32/34/38/39/40/41/42/48/53/66/71, 5G: n1/2/3/5/7/8/12/14/20/25/26/28/29/30/38/40/41/48/53/66/70/71/75/76/77/78/79 - Dual eSIM
- Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Sprint., Etc.
Deploy to iPhones that are already enrolled
Changing a new-enrollment profile is not a substitute for deploying Company Portal to devices that have already completed ADE enrollment. For that existing fleet, Microsoft documents a separate workflow:
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors- Assign Company Portal as a Required app with device licensing to the target device group.
- Create an app configuration policy for Company Portal.
- Deploy that app configuration policy to the same device group as the app assignment.
- Allow the devices to check in so they can receive the app and configuration policy.
Microsoft cautions that modern-authentication ADE enrollment automatically pushes app configuration policy settings when Install Company Portal is enabled. A conflicting manual configuration can incorrectly prompt users to sign in and download a management profile that is already installed. Review the app configuration before assigning it. Refer to Microsoft’s instructions for installing Company Portal on already-enrolled ADE devices.
Rank #3
- 6.1inch Super Retina XDR display. Aluminum with color-infused glass back. Ring/Silent switch
- Dynamic Island. A magical way to interact with iPhone. A16 Bionic chip with 5-core GPU
- Advanced dual-camera system. 48MP Main | Ultra Wide. Super-high-resolution photos (24MP and 48MP). Next-generation portraits with Focus and Depth Control. 4X optical zoom range
- Emergency SOS via satellite. Crash Detection. Roadside Assistance via satellite
- Up to 26 hours video playback. USB C, Supports USB 2. Face ID
What VPP installation does—and what it does not do
VPP handles the app license and managed installation; it does not complete every identity step for the user. With device licensing, the license is associated with the iPhone, so the user does not need to sign in to the App Store to install Company Portal. Intune sends Apple license-assignment information, and Apple and the MDM service carry out the assignment and installation flow.
That is different from signing in to Company Portal with an organization account. With Setup Assistant with modern authentication, a user may still need to sign in to Company Portal after enrollment to complete Microsoft Entra registration. That registration can be required to access resources protected by Conditional Access. Reaching the home screen or seeing Company Portal installed does not by itself confirm that this sign-in step is complete. See Microsoft’s guidance on Company Portal and Setup Assistant enrollment.
Quick Recap
Best Value
- 6.1" Super Retina XDR OLED, HDR10, 800 nits (HBM), 1200 nits (peak), 2532x1170px at 460ppi, 4005mAh Battery
- 8GB RAM, Apple A18 6-core CPU (2 performance + 4 efficiency cores), Apple GPU 4-core, 16‑core Neural Engine
- Rear camera: 48MP, f/1.6, wide, Front Camera: 12MP, f/1.9, wide, iOS 18.3.1, upgradable to iOS 18.5
- Connectivity: Global 4G LTE, Sub-6 GHz 5G, LTE, Wi-Fi 6, Bluetooth 5.3, NFC, USB-C, Wireless Charging (7.5W). (does not have mmWave 5G or MagSafe or physical SIM card) - Dual eSIM Only
- Unlocked for freedom to choose your carrier. Compatible with both GSM & CDMA networks. The phone is unlocked to work with all GSM Carriers & CDMA Carriers Including AT&T, T-Mobile, Verizon, Straight Talk., Etc.
Rank #4
- This pre-owned product is not Apple certified, but has been professionally inspected, tested and cleaned by Amazon-qualified suppliers.
- There will be no visible cosmetic imperfections when held at an arm’s length.
- This product is eligible for a replacement or refund within 90 days of receipt if you are not satisfied.
- Product may come in generic Box.
Common setup errors to check
- Installing the App Store version directly: For ADE devices, Microsoft directs administrators to deploy Company Portal through Intune rather than use the App Store version. Intune deployment is also the documented route for enabling automatic updates.
- Choosing Available instead of Required: Available does not automatically install the app; a user must initiate installation.
- Using user licensing: If the goal is to avoid an App Store sign-in prompt, use device licensing.
- Leaving automatic updates disabled: Check the location token’s automatic app update setting and confirm the token has not expired.
- Applying only the new-enrollment profile to an existing fleet: Use the existing-device app assignment and app configuration workflow.
- Assuming app installation finishes identity setup: Depending on the selected authentication method and access requirements, users may still need to sign in to Company Portal to complete Microsoft Entra registration.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
