Device Enrollment Restriction in Intune

%3CLINGO-SUB%20id%3D%22lingo-sub-2278829%22%20slang%3D%22en-US%22%3EDevice%20Enrollment%20Restriction%20in%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2278829%22%20slang%3D%22en-US%22%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EHello%2C%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3ECan%20we%20stop%20the%20enrolling%20of%20any%20personal%20devices%20(Windows%2C%20iOS%2C%20Android%2C%20macOS)%20to%20Intune%20by%20creating%20a%20device%20type%20restriction%20setting%20in%20Intune%20(Devices%2FEnrollment%20Restrictions).%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EAnd%20once%20we%20create%20the%20device%20type%20restriction%20policy%2C%20what%20would%20be%20the%20impact%20on%20the%20current%20personal%20devices%20which%20are%20already%20enrolled%20to%20Intune.%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22_1qeIAgB0cPwnLhDF9XSiJM%22%3EAlso%20what%20would%20be%20the%20best%20approach%20to%20unenroll%20the%20current%20personal%20devices.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2278829%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2278959%22%20slang%3D%22en-US%22%3ERe%3A%20Device%20Enrollment%20Restriction%20in%20Intune%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2278959%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20depends%20on%20how%20you%20are%20interpreting%20personal%20devices.%3CBR%20%2F%3E%3CBR%20%2F%3EBut%20yes%20of%20course%20you%20can.%20You%20can%20configure%20device%20enrollment%20restrictions%20in%20Intune%20to%20block%20personal%20devices%20to%20be%20enrolled.%3CBR%20%2F%3E%3CBR%20%2F%3EIt%20does%20not%20effect%20existing%20enrolled%20devices....%20it%20only%20blocks%20the%20possibility%20to%20enroll%20new%20devices.%3CBR%20%2F%3EBut%20beware%20you%20will%20need%20to%20make%20sure%20you%20have%20configured%20autopilot%20to%20enroll%20windows%20devices%20and%20start%20using%20apple%20business%20manager%20etc.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Contributor

Hello,

 

Can we stop the enrolling of any personal devices (Windows, iOS, Android, macOS) to Intune by creating a device type restriction setting in Intune (Devices/Enrollment Restrictions).

 

And once we create the device type restriction policy, what would be the impact on the current personal devices which are already enrolled to Intune.

 

Also what would be the best approach to unenroll the current personal devices.

1 Reply
Hi,

It depends on how you are interpreting personal devices.

But yes of course you can. You can configure device enrollment restrictions in Intune to block personal devices to be enrolled.

It does not effect existing enrolled devices.... it only blocks the possibility to enroll new devices.
But beware you will need to make sure you have configured autopilot to enroll windows devices and start using apple business manager etc.