Test Shared iPad guest sessions without assuming user-targeted policy applies

Source facts

Shared iPad temporary sessions use the Guest sign-in rather than a Managed Apple ID, and session data is removed at sign-out. Only device-assigned apps and profiles apply to those temporary sessions. Intune does not report device or user status for Shared iPad apps and profiles assigned to user groups. Microsoft Learn.

Applicability

Review a Shared iPad design that permits temporary sessions alongside named users. Separate the guest requirements from role-specific customization, and identify which assignment object supplies each intended control.

DSE recommendation

Make the temporary-session configuration an explicit device-targeted acceptance set. Do not copy a named user’s expected experience into the guest test without checking applicability. Ask the endpoint owner to document the intended applications, network access, and restrictions for an unauthenticated session. Keep user-profile reporting gaps visible rather than translating missing status into success.

Verification

Start a controlled guest session and inspect the approved applications and settings directly. Then end the session and confirm the expected data-removal behavior using harmless test content. Run a separate named-user test where required. Retain observed results alongside assignment scope, and investigate any guest capability that the design intended only for a named role.

Official references

Microsoft Learn: Shared iPad devices.