MacBook Migration

Two migration scenarios:

Supervised devices (registered in your ABM)

These devices benefit from Zero Touch deployment. This migration consists of unenrollment and changing the MDM server in ABM.
Steps to follow: 

1. Establish the connection between Factorial IT and your ABM 
2. Reassign devices in ABM to Factorial IT's MDM server.(This operation does not erase device data.)
3. Once reassignment is complete: 
   • Devices will automatically be visible in Factorial IT. 
   • They will be assigned to your employees to track migration progress
4. Remove the old MDM from your previous solution's console.
   (ABM does not remove them automatically.)
5. The user will receive a popup "Remote Management" on their machine asking them to install the new Factorial IT (FleetDM) MDM profile.
   This action does not disassociate devices from the old MDM; you need to do this manually.

Unsupervised devices

Apple does not allow two MDMs to coexist on the same device. The migration therefore consists of disenrollment followed by re-enrollment.

Steps to follow:

1. Unenroll the device from the current MDM.
2. Launch the enrollment campaign via your Factorial IT dashboard
3. Factorial IT sends reminders every 7 days until the user installs the MDM

Once devices are removed from your previous MDM, use Factorial IT's "invite to MDM" function to facilitate deployment. Reminders will be sent every 7 days to unenrolled employees, and you can track progress in your dashboard.

From any MDM

Simply activate the "Windows MDM Automatic Migration" option in your Factorial IT MDM Settings. By enabling this option, FleetDM will automatically migrate Windows devices enrolled with another MDM solution.

Specifically from Intune

If you have connected Intune and Entra ID

Here is the procedure to follow imperatively before initiating the migration:

1. Set FleetDM up as external MDM on Entra ID :https://factorial-it.mdm.getprimo.com/settings/integrations/automatic-enrollment/windows
2. On Entra, switch the automatic enrollment to FleetDM :
   • Go to: https://entra.microsoft.com/#view/Microsoft_AAD_IAM/MdmList.ReactView (or search “Mobility” on entra.microsoft.com)
   • Alternatively, go to: https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Mobility (or search “Mobility” on portal.azure.com)
   • Then select “Intune”
   • Select “None” in both options and Save

• Do the same on “Fleet” but select “All” instead
•  

Migrating your devices individually from Intune

Follow these steps to migrate your devices from Intune one by one :

• • Enroll the computer in Factorial IT, the device will be created in Factorial IT with the status "Enrolled in another MDM"
• • Use the migration button in Factorial IT to apply the migration script

Migrating all your devices from Intune

Follow these steps to migrate your devices from Intune:

1. Upload the following script:
   • Find your full MDM URL: The format is: https://REPLACE_BY_COMPANY_NAME.mdm.getprimo.com/api/mdm/microsoft/discovery Replace REPLACE_BY_COMPANY_NAME with the company name / domain that is present in the Fleet URL
   • Paste it in the script, replacing INPUT_URL_HERE
   • Upload the script on the your MDM instance (Controls > Scripts)
     

     $EnrollmentsPath = "HKLM:\SOFTWARE\Microsoft\Enrollments\"$Enrollments = Get-ChildItem -Path $EnrollmentsPath$DiscoveryServerFullUrls = @("INPUT_URL_HERE")Foreach ($Enrollment in $Enrollments) {    $EnrollmentObject = Get-ItemProperty Registry::$Enrollment    if ($EnrollmentObject."DiscoveryServiceFullURL" -in $DiscoveryServerFullUrls ) {        $EnrollmentPath = $EnrollmentsPath + $EnrollmentObject."PSChildName"        Write-Host "Suppression de l'inscription : $EnrollmentPath"        Remove-Item -Path $EnrollmentPath -Recurse        Write-Host "Inscription supprimée. Réinscription de l'appareil..."        & "C:\Windows\System32\deviceenroller.exe /c /AutoEnrollMDM"        Write-Host "L'appareil a été réinscrit."    }}

2. Create a policy to migrate
   • Re-use the URL from above
   • Paste it in the query below, replacing INPUT_URL_HERE
     

     SELECT 1 FROM registry WHERE path LIKE 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\%%'AND name =  "DiscoveryServiceFullURL"AND data NOT IN ("INPUT_URL_HERE")

3. Link script to policy
   • Navigate to Policies > No team
   • Click on “Manage automation” and link the script you uploaded to the newly created policy