CNAME records

Hi 20passist, an Apple MDM Push certificate is required for Intune to manage iOS/iPadOS and macOS devices. After you add the certificate to Intune, your users can enroll their devices using either the Intune Company Portal, or Apple's bulk enrollment methods. More information can be found here: Get an Apple MDM push certificate.

If there are BYOD iOS device - They can be enrolled within the Intune service by installing the Intune Company Portal, following though the prompts, and installing a Management profile. Have a look over our iOS enrollment docs on what this process looks like.

Validating if a device has been enrolled can be confirmed by the Intune Company Portal being installed/signed in on the device, or if a Management profile has been installed.

Steps on manually validating if a device is managed:

Settings App > General > If a "Device Management" profile exists, then the device is managed by an MDM.

Hope this helps!