Device enrollment restrictions

Question 1

For which 5 OS can you configure enrollment restrictions ?

Answer 1

• Android
• iOS
• macOS
• Windows 10
• Windows 11

Question 2

What are the 2 types of device enrollment restrictions you can configure in Microsoft Intune ?

Answer 2

• Device platform restrictions: Restrict devices based on device platform, version, manufacturer, or ownership type.
• Device limit restrictions: Restrict the number of devices a user can enroll in Intune.

Question 3

What kind of restrictions can you configure?

Answer 3

• Device limit
• Device platform
• OS version
• Device manufacturer
• Device ownership (personally owned devices)

Question 4

What are the steps to create a device platform restriction in Intune ?

Answer 4

1. go to Devices > Under Device onboarding select Enrollment.
2. Under Enrollment options, select Device platform restriction.
   3 . Select the tab along the top of the page that corresponds with the platform you’re configuring.
   Select Create restriction.
3. On the Basics page, give the restriction a name and optional description.
   Select Next.
4. On the Platform settings page, configure the restrictions for your selected platform.
5. Optionally, add scope tags to the restriction.
6. On the Assignments page, select Add groups and then use the search box to find and select groups
7. Review + create

Question 5

For device platform restriction, what are the options in the platform settings page

Answer 5

• Platform (Android): Select Allow to permit a platform to enroll, and Block to restrict it.
• MDM (Windows, macOS, and iOS/iPadOS): Select Allow to permit a platform to enroll, and Block to restrict it.
• Personally-owned: Select Allow to permit devices to enroll and operate as personal devices.
• Device manufacturer (Android): Enter a comma-separated list of the manufacturers that you want to block.
• Allow min/max range (Android, Windows, iOS/iPadOS): Enter the minimum and maximum OS versions allowed to enroll.