Converting a macOS DMG to a Signed PKG for Microsoft Intune
A DMG fails Intune line-of-business requirements by design. How to repackage an app with productbuild, and the signing step most tutorials skip.
Field notes on enterprise endpoint management — Jamf Pro, Microsoft Intune, Windows Autopilot, Apple Business Manager, zero-touch deployment, Conditional Access and compliance. Written from work on real 1,000+ device fleets in regulated environments, not lab setups.
A DMG fails Intune line-of-business requirements by design. How to repackage an app with productbuild, and the signing step most tutorials skip.
Windows 11 Enterprise 26H2 images are now selectable in Intune provisioning policies. New Cloud PCs get it immediately; existing ones only move on reprovision.
E1 through E7 and F1/F3 explained by what they actually unlock — Entra ID P1 vs P2, when E7 pays off, and the one real difference between F1 and F3.
Version 26H2 installs as a small enablement package, not a full reinstall. What actually matters for admins: the WMIC removal, Administrator protection, and how to stage the rollout.