I'm curious to know if there is any community interest, or any product plans for deploying MacOS platform scripts to intune joined devices?
MacOS Intune Scripts
I know I haven't seen many requests for MacOS support in NMM, yet, but there's definitely a need there for scripting from Intune.
I'm definitely the last person to ask about Apple/Mac devices (I've got Microsoft Kool-Aid running through my veins 🤣) however, I'm sure there is interest from other partners.
What are you thinking of doing with that feature, Adrian?
I too am pro Microsoft all the way, to keep it short, other than employees risking productivity time learning a new OS due to never using windows (and companies developing iOS apps), I have observed a big motivation for end users to demand MacOS is the hidden (unfounded) agenda of connecting their own iCloud account to their company device, ...allegedly. Alas, diversification is key to more clients!!
We are looking into being able to scale mac management with just intune.
(Currently, Mac device deployment is best done by requiring apple business accounts for individual companies and setting up the MDM server connection.
Efficiency is pretty capped there and there's honestly not much that can make that easier.)
When it comes to app deployment/update management, the traditional method is either create the app in intune or sync from ABM after adding it there.
However you can also deploy a script, which is available in intune using the platform script feature.
We've resorted to shell scripts.
I understand this is available via graph as well: deviceShellScript resource type - Microsoft Graph beta | Microsoft Learn
Due to the needs of app installation and update management at scale, we are also looking at an open source tool, installometer and patchometer (apache 2.0 license)
If these tools are integrated into UAM, we could also satisfy any app management and update auditing compliance!
However, at least enabling MacOS shell scripts from Nerdio would enable some serious MSP efficiency for us and any other multi tenant manager!
(shell scripts can also be used to manage rare admin approval escalations found in company's with software engineers using Mac devices)
Thanks, Adrian.
It's very true. More and more companies are giving employees choices of the device type they want to use.
Adding the functionality would just make you that much more appealing to a potential (and current) customer.
Microsoft has been working more and more to close the gap between intune and Jamf for Mac management. With the advent of connecting PSSO, and the scripting ability, individual IT departments can now forgo having to purchase Jamf on top of intune. While they wait for potential LAPS this year from Microsoft, many setup scripts for admin demotion after enrollment, as well as promotion and admin user creation for support. In conjunction with pretty available open source projects like Patchomator, individual IT departments can also manage installation and update of applications on MacOS.
I want to potentially argue, for MSPs, enabling the ability to use shell scripts for Mac may virtually eliminate the need for Jamf, and would further secure NMM as a staple tool!
Dave Stephenson
I see a unified script catalogue is on the roadmap and would include bot remediation and macos scripts.
Are you able to comment at this point on any of the following:
- would these be precanned scripts, or will we have the ability to create our own scripts?
- would these be creatable/assignable from the MSP scope?
- would this (on the mac side) include the ability to apply a frequency of the script similar to intune native?
Thank you for any reply!
Adding onto this thread :)
Mac management from Intune is an evolving need. If today I had a basic way to manage scripts (or apps) across our accounts that'd be awesome. I'd like to push some apps to all endpoints for management for windows and Mac OS at the same time.
Even if it was to setup a bash script to install stuff, being able to manage the things in one place for all the Intune environments is the goal. Ideally these are scripts we manage and create, and they should have the ability to be variables for each tenant.
+1 for MacOS scripts. More and more clients are asking us to support Macs.

I've added Intune Mac apps | Expand Mac support, as many clients have Macs. – Nerdio Help Center as well.
Please sign in to leave a comment.
Comments (7 comments)