This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 11%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
Hi,
I see under Windows Devices a lot of computers that are not the company's computers.
And I found that these were the personal computers of the employees that they connected with the user of the work and signed up for intune.
How can I prevent this from happening? Or how can I determine who can enroll a new computer for intune?
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 66%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENH%3C/text%3E%3C/svg%3E)
You can create enrollment restrictions to block personal devices from enrolling. This link shows how to create the restriction, and what classifies as personal vs corporate - https://video2.skills-academy.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#blocking-personal-windows-devices
Hi,
I do not understand how the DEM helps to block personal devices. Also it is limited to 150 users and we have many more users.
We do not currently use Autopolit. Our remote offices buy low numbers of computers at a time, something like 20-30.
And they need to turn on the computers one by one and send us the computer ID to attach them to the autopilot. is it true?
Thanks
I do not understand how the DEM helps to block personal devices.
No one said it did. Please fully read the section in the document that Nick linked to above which is specifically titled "Blocking Personal Windows Devices". Using a DEM account is one of many options. These possible paths are all indicative of an automatic way to determine whether a device is corporate owned or not. There's no "magic" tag associated with a device that marks it as personal so the state of the device currently or how it is enrolled are the only valid technical cues.
And they need to turn on the computers one by one and send us the computer ID to attach them to the autopilot. is it true?
No. Manually extracting the Autopilot "Hash" ID is meant for testing purposes only. Your device vendor should be registering your devices for you into Autopilot.