Registration of Authorized devices

Hi Tyrell,

there is no approval workflow available for authorization of devices. But you could use Conditional Access to allow only compliant devices to restrict access to devices which fulfill your compliance settings like BitLocker encryption is on etc. and you could further restrict enrollment to corporate only whitelisted devices, this would block personal devices. These measurements available in Intune can be used for Windows 10, iOS and Android but again there is no notification or approval workflow available for this. When dealing with enrollment restrictions you need to get serial numbers/IMEIs (iOS, Android) or hardware hashes (Win10) and whitelist them. 

See detailed information here:

Set enrollment restrictions

https://docs.microsoft.com/en-us/intune/enrollment-restrictions-set

How To: Require managed devices for cloud app access with conditional access

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/require-managed-devices

best,

Oliver