Merge pull request #16583 from MicrosoftDocs/main

Publish main to live, Monday 10:30AM PST, 11/11

memdocs/intune/enrollment/device-enrollment-program-enroll-ios.md

@@ -216,7 +216,10 @@ Now that you've installed your token, you can create an enrollment profile for a
 1. Choose a token, and then select **Profiles**.  
 1. Select **Create profile** > **iOS/iPadOS**.
 1. For **Basics**, give the profile a **Name** and **Description** for administrative purposes. Users don't see these details.
-1. Select **Next**.  
+1. Select **Next**.
+
+   > [!IMPORTANT]
+   > You must assign an enrollment policy to your devices before the devices become active. We recommend that you set a default enrollment policy as soon as possible so that as devices sync from Apple Business Manager or Apple School Manager, and then turn on, they can enroll correctly through automated device enrollment. If a device you synced from Apple is not assigned an enrollment policy and someone turns it on to set it up, enrollment will fail. 
 
     > [!IMPORTANT]
     > If you make changes to an existing enrollment profile, the new settings won't take effect on assigned devices until devices are reset back to factory settings and reactivated. The device name template setting is the only setting you can change that doesn't require a factory reset to take effect. Changes to the naming template take effect at the next check-in.    

memdocs/intune/enrollment/device-enrollment-program-enroll-macos.md

@@ -128,7 +128,10 @@ At the end of this procedure, you can assign this profile to Microsoft Entra dev
 1. Select an enrollment program token.  
 1. Select **Profiles** > **Create profile** > **macOS**.  
 
-    ![Create a profile screenshot.](./media/device-enrollment-program-enroll-macos/image04.png)  
+    ![Create a profile screenshot.](./media/device-enrollment-program-enroll-macos/image04.png)
+
+   > [!IMPORTANT]
+   > You must assign an enrollment policy to your devices before the devices become active. We recommend that you set a default enrollment policy as soon as possible so that as devices sync from Apple Business Manager or Apple School Manager, and then turn on, they can enroll correctly through automated device enrollment. If a device you synced from Apple is not assigned an enrollment policy and someone turns it on to set it up, enrollment will fail. 
 
 1. For **Basics**, enter a name and description for the profile so that you can distinguish it from other enrollment profiles. These details aren't visible to device users.