Intune Android & iOS enrollment - need some guidance

Hi WarreVlieghe ,

I have just (95%) completed a rollout of Corp Android devices (COFM) and iOS Supervised Devcies.

We also have enabled staff to enroll their personal devices in order to install M365 apps (only the ones we can cover with App Protection Policies) on them. This has been very successful.

The most important parts are.
1. Enrollment Restrictions - Block users from enrolling Personal devices.

2. Comms and documentation showing them how to do it.

Obviously you have the policies to sort, but once in place your users will be able to Register their devices to use the apps you make available to them.
In both the 'Droid and iOS steps, the users will HAVE to Postpone enrollement. But when they do this, the apps you make available will be shown in the company portal.

For Android they need to install the Company Portal app. This acts as a Broker app and for iOS devices, they will have to install MS Authenticator & Company Portal, but there is no need to even open the Authenticator app as it will be their broker app.

Hope that helps.