In Intune, Just recently today, the enrolled users have changed to the primary users of all devices. Am just wondering if this is intended ? There has been no other changes on my part.

@ Aze Isa , Thanks for posting in Q&A. Yes, your understanding is correct. There's a change with this feature. Currently, when we change primary user of the managed device, the Enrolled by will also be changed to this user as well. That is to say, the Enrolled by will align with the primary user. Hope the above information can help. If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

in Intune, The enrolled users have changed machine wide , is this a new feature

Accepted answer

Crystal-MSFT 45,486 Reputation points Microsoft Vendor

2024-06-21T02:15:38.3466667+00:00

@Aze Isa, Thanks for posting in Q&A. Yes, your understanding is correct. There's a change with this feature. Currently, when we change primary user of the managed device, the Enrolled by will also be changed to this user as well. That is to say, the Enrolled by will align with the primary user.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
iamaze 20 Reputation points

2024-06-21T10:32:02.28+00:00

Thanks, but what is the impact of this change? Will the user have admin access to the machine ? and since the primary user is now is also the enrolled user, what is the difference between the two then?
Is there a plan to remove either ?
Or is there any slight difference between the two ?

Crystal-MSFT 45,486 Reputation points Microsoft Vendor

2024-06-24T06:36:41.7966667+00:00

@iamaze, Thanks for the reply. Based on my checking in the testing device, I find the local administrators group member is not changed That is to say the user doesn't have admin right on this device. If you want to change, you can use account protection policy to manage local administrators group members.

https://techcommunity.microsoft.com/t5/intune-customer-success/new-settings-available-to-configure-local-user-group-membership/ba-p/3093207For the difference between them, you can read it in the following link:

https://medium.com/learning-mem/about-intune-primary-user-84591ddbb1e#:~:text=Answer%3A%20The%20Intune%20%E2%80%9Cprimary%20user%E2%80%9D%20and%20%E2%80%9Cenrolled%20by%E2%80%9D,lifetime.%20I%20will%20tell%20a%20story%20to%20explain%E2%80%A6

Note: Non-Microsoft link, just for the reference.
Sign in to comment

Share via

in Intune, The enrolled users have changed machine wide , is this a new feature

0 additional answers