Forum Discussion
Restrict device enrollment for some users
We have AD with Azure AD connect.
We use Intune MDM/MAM and auto-enroll Windows 10 devices, iOS and Android.
All users have the EMS license.
We are requesting a way to restrict the Intune enrollment for some users (not all) to only have one device.
Is there a way?
Im trying to think out a way with Conditional Access and Dynamic groups but I dont get it all the way.
We can go the other way around, restrict all users to only be able to register one device (this is easy). Then allow some users to register more.
Grateful for any tip or a nice complete solution
Cheers
Hi Fredrik,
this is possible with "group-assigned enrollment restrictions".
See Intune announcement "Week of November 27, 2017" here:
So it's announced back in November but it's still in rollout (all my tenants do not have the feature available yet). So your tenant might not see the feature at the moment. Be patient and wait for it, it will exactly address your needs.
best,
Oliver
Hi Fredrik,
this is possible with "group-assigned enrollment restrictions".
See Intune announcement "Week of November 27, 2017" here:
So it's announced back in November but it's still in rollout (all my tenants do not have the feature available yet). So your tenant might not see the feature at the moment. Be patient and wait for it, it will exactly address your needs.
best,
Oliver
That is great news. Altough I haven't seen it in our tenant yet.
Is there a way to speed-up the "upgrade" ?
No there is no way, you have to be patient. You need to wait until global rollout is finished.
best,
Oliver
