r/applebusinessmanager

Hi, I am doing some IT for our small business. We have
8 Laptops/ Studios and have recently set up ABM (as everyone is using personal atm)

I have tested it on one device. Created a partician, scanned with the Apple config tool and it is definitely managed both in the ABM portal as a device and in system settings but the APPS assigned (Outlook, Final Cut Pro, Slack) via the attached blueprint are not coming through.

Spent the last 24 hours trying to figure out what’s wrong.

Some help would be great!

Hey all, first time dipping my toe in Mac MDM. So far, I'm already getting stuck on step 1: getting ABM started.

I've tried to verify the organization multiple times, but so far I've gotten a 'couldn't be verified based on the information provided' reply each time.

I've tried verifying our domain, but when I input 'domain.org' (placeholder due to privacy ofc), I get an 'unable to add domain' error.
We also have the 'domain.nl' domain, and using that -does- lead to a verified checkmark. So I guess that's 1 out of 2 necessary bits of information verified and validated?

The second bit of info I've tried both the D-U-N-S number (webform says not valid), our KVK number (Dutch business ID, webform also does not accept this) and finally one of the Microsoft365 invoices under the 'Utility bill' options.

1.5 weeks later I still got a 'information is not valid' email.

Is this process broken, or am I just not providing the right information? The rejection mail does not provide any specifics on which information couldn't be verified. Is there a way to contact Apple about this?

For two days Ive been trying to sign in on a new managed company iphone 17e, during the initial setup when it asks to sign into a work account to enroll I get the error "Verification Failed - your apple account does not support the expected services on this device. Contact your administrator to sign in" im the admin and have no idea whats going wrong. Ive had no issue before doing this. If I unenroll the phone and set it up normally then sign in under settings the account signs in. If I go into settings>general to sign in with work account I get the same error message. I have no idea whats im doing wrong.

Ultimately I want to load a package of apps which I have already configured via blueprint and have setup several devices previously using this method. I also want the end users to be able to uninstall an app if they need to troubleshoot or are exp issues and I have the apps set to "Manual" for installation which should allow the end user to delete but that doesnt seem to work and it wont let me delete the apps when testing this out..

I enrolled some devices on the day of launch, and now they are bricked. Apple can't fix it, so now I've been scared to try anything else.

Has anyone had similar experiences, and should I keep enrolling the rest of my company?

I work for a small company, and was tasked with figuring out how to purchase and MDM a fleet of Macs + iPhones (~24 devices).

Ive setup ABM and gotten our Org verified. I want to enable Domain Federation (with Google Workspace) in ABM so all uses have "Managed Apple Accounts". (My work email and a break-glass admin mailing list set as org admins, have an Org #). From my understanding, I need a "Customer ID" in order for purchases to flow into ABM properly.

So far:

1. I thought setting up an account on https://www.apple.com/us-smb/store would give us a Customer Number. Based on my research/understanding a "Managed Apple Account" cannot be used for any store, and so I signed up using one of our alternative domains. Got account verified, added EIN etc.
2. I called the Apple Business support phone number (1-866-902-7144) once the account was setup and was told I cannot get a "Customer Number" for that account and must go into the Apple Store in-person.
3. Went to the Apple Store, gave them Org #, etc. They emailed me to setup the "Custom Store" account so I can get a "Customer Number"

Here is where my problem is: they want me to give them an email to create the login for the "Custom Store"; I gave the Rep the rundown and their response was basically "just use your primary domain and I will try it" without addressing any of my concerns, so I hope one of y'all can help me figure out the proper path.

Ideally, it would be one of our primary domain emails; but those will become "Managed Apple Account"s once I federate the domain, and I don't want to break the "Custom Store" after I federate, or to lock up the domain into federation if this will cause problems.

Alternatively, I would like to use the secondary-domain email I setup and went through the flow on the us-smb store; but I think that might be unusable now since the "Custom Store" FAQ states that you cant reuse a "Personal Apple account" or the "ABM admin account". If that one's burned, I can provision another secondary-domain account (least ideal, but I'll do it if that's correct).

What the rep won't answer and the FAQ doesn't address:

1. Can the store login be a federated/Managed account on our captured domain, or does the store require a non-managed account?
2. If it has to be non-managed: what do people actually use? An email on a separate domain you don't federate? A subdomain? Something else?
3. Is what I did on the SMB flow a personal account?
4. Has anyone's store login broken after federating (works as a normal account, then dies once it becomes Managed)?

Basically: what kind of email survives as a working eCommerce/Custom Store login once the domain is federated? I want to pick the right one before I trip the one-way domain capture, not after. If you've actually set up a Custom Store on a federated domain, I'd love to know what email you used.

If this is the wrong sub, please let me know, and thanks in advance!

Hi everyone. We recently moved our users to federated Apple IDs, via ABM/Entra SCIM config. We need to upgrade their iCloud storage, but due to the entra config, now need to parse through our entire user list to exclude user accounts that do not actually use iPhones. We already started this process manually, by adding users to a new user group - but my question is:

1. Can we use Smart Groups for this? I only saw two options for smart group settings (org role and title), but did know if there were actually other options folks are using to make this process easier (Intune group assignment?)

2. If there aren’t other options, how are folks currently assigning extra cloud storage via ABM?

We obviously don’t want to just pay for all user accounts if not all users have iOS devices, but the only other option seems to be manual - which is just inefficient.

Thanks!

Hi all. We've got our org freshly created and verified in ABM to use together with our MDM. However, when we go to Apps & Books and try to open the App Store, it just says "This Apple Account is not allowed to use Apps and Books".

In the Org info, the Tax Status says "Not Applicable". Is it because we're a Government Org? How do we remedy this? We wrote to Apple Business Support over a week ago, no reply so far.

EDIT: This is not about an apple device - The issue is present on the ABM website when trying to navigate to Apps & Books as an Org Admin.

Hello,

I am an intern for a company and they need help adding some new iPads to their ABM, i got as far as adding them to the company and assigning a DMS but i cant figure out how to enable automated device enrollment, they said the person before who would do it quit randomly and didn’t leave any help on how they did it so no one knows how to get past this part. I also have no experience with anything IT related, so im kind of just hoping i can get some help here.