Intune Co-Management - MDM User Scope

M.Burland 21 Reputation points
2020-10-10T23:56:29.68+00:00

School environment with loads of Windows 10 PC's managed by SCCM. We have Intune and have successfully enabled co-management.

Something I need to clarify. Currently in AAD the MDM User Scope is set to "All" and the MAM to "None." This was done following the walkthrough for co-management setup.

But to me this seems to have the consequence that students who buy new personal W10 devices can inadvertently end up enrolling onto the School's MDM.

All we want is for domain W10 devices to auto-enroll into Intune. What User Scope settings should I use?

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,303 questions
0 comments
Accepted answer
  1. Nick Hogarth 3,436 Reputation points
    2020-10-11T22:13:07.58+00:00

    You can create enrollment restrictions in Intune and block personal devices from enrolling. Only corporate methods will be allowed (Co-management, GPO, etc) https://video2.skills-academy.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#blocking-personal-windows-devices

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Crystal-MSFT 45,656 Reputation points Microsoft Vendor
    2020-10-12T04:27:13.677+00:00

    @M.Burland , Agree with Nick, we can set the "Personally owned" as Block under Windows (MDM) in device restriction. Also, there's another setting "Device limit", if the user only has limited device, we can consider setting Device limit for the users.

    Hope it can help.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.