MT.1093: Apple Automated Device Enrollment Tokens should be valid for more than 30 days
| ID | MT.1093 |
| Severity | High |
| Suite | Mito |
| Product | Intune |
| Feature | Tenant administration |
| Security area | Devices and endpoints |
| Resource type | Connector |
| User impact of fixing | Low |
| Effort to fix | Low |
| Reads from | Microsoft Graph |
| Licence needed | INTUNE_A |
What this checks and how to fix it
Section titled “What this checks and how to fix it”This test checks if the Apple ADE token is valid and not expired. The Apple Automated Device Enrollment (ADE) token is required to synchronize Apple devices with Microsoft Intune. The token has a lifetime of one year and needs to be renewed to allow synchronization.
Remediation action
Section titled “Remediation action”See the Microsoft learn instructions to Renew enrollment program token.
Direct Link for Intune Portal - Enrollment program tokens.
Mito check. Author: nicolonsky. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.