# Include user sign-out in the maintenance plan for shared iPads

> Can an Intune-managed shared iPad complete its update while a user remains signed in?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-235-include-user-sign-out-in-the-maintenance-plan-for-shared-ipads/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:28:01+00:00
- Modified: 2026-09-10T01:20:46+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, IT
- Reading time: 2 minutes

## What you need to know

Can an Intune-managed shared iPad complete its update while a user remains signed in?

## Potentially affected

Review supervised iOS/iPadOS devices enrolled in Intune and used by multiple people. Confirm the current supported update-management method for the actual shared-device configuration before adapting the guide's older scheduling examples.

## DSE recommendation

Assign ownership of the shared-device handoff as well as the update policy.

## Article

## Source facts

Microsoft’s supervised iOS/iPadOS update guide says all users of a shared device must be signed out before updates can be applied. Signing users out or rebooting the device satisfies that session requirement. The guide also warns that MDM-based Apple update workloads are deprecated and recommends declarative device management for software updates. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/device-updates/apple/planning-guide-ios-ipados).

## Applicability

Review supervised iOS/iPadOS devices enrolled in Intune and used by multiple people. Confirm the current supported update-management method for the actual shared-device configuration before adapting the guide’s older scheduling examples.

## DSE recommendation

Assign ownership of the shared-device handoff as well as the update policy. Ask the device and operational owners when every user can safely end their session and who will confirm that state. Plan how ongoing work will be saved and how a delayed handoff will be escalated. Keep an authorized reboot distinct from a forced interruption of active work. Do not assume an empty room or an apparently idle screen proves every account has signed out.

## Verification

During an approved maintenance exercise, record the session state, chosen update action and resulting operating-system version. Confirm that the shared workflow and required applications are available afterward. If the update remains pending, preserve the observed state before repeatedly changing policy. Use the result to refine the handoff procedure without claiming that a schedule alone guarantees installation.

## Official references

[Microsoft Learn: Admin checklist for iOS/iPadOS software updates in Microsoft Intune](https://learn.microsoft.com/en-us/intune/device-updates/apple/planning-guide-ios-ipados).

## Primary reference

- Name: Admin checklist for iOS/iPadOS software updates in Microsoft Intune - Microsoft Intune | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/intune/device-updates/apple/planning-guide-ios-ipados
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Include user sign-out in the maintenance plan for shared iPads,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-235-include-user-sign-out-in-the-maintenance-plan-for-shared-ipads/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.