What Is The Maximum Number Of Devices That Can Be Registered In A Group? Kyocera

Microsoft Intune has been around for some fourth dimension now, and the cloud service has matured quite a scrap over the past years. Currently, the latest iteration of the service is out in Public preview, which is Intune in Azure. If you want to explore what's coming in the latest version (code name Ibiza), y'all can setup a trial business relationship and start exploring. In this blog postal service, nosotros'll take a wait at one of the new features that I'yard actually excited nigh, enrollment restrictions. In the by, companies that wanted to prevent their users from enrolling their personal devices, or a certain type of device, did non take that possibility. Now, with Intune in Azure, we can manage exactly that. Withal, in that location are a few restrictions to what we can exercise which will be outlined in this post.

Note – This post contains data about a public preview version of Microsoft Intune, please note that the final release may announced differently.

Enrollment restrictions options

You lot are given the options when it comes to enrolment restrictions to perform the post-obit:

Fix device blazon restrictions
Gear up device limit restrictions

This means that you lot tin can gear up the types of devices that are allow to enrol, achieved by but choosing to Block or Permit a given device type platform like Android or iOS for example. As for the maximum number of devices restriction option, you define a number of how many devices a single user is immune to enrol, for instance 5 devices.

In the current release of Microsoft Intune, you also have an option to Allow or Cake personally endemic devices. This comes in handy when organizations only wants to allow devices registered in Apple Device Enrolment Plan for instance (or manually prestage them by their serial number direct in Microsoft Intune), preventing finish users from enrolling their personal devices. This would permit for a total control scenario of what devices are enrolled and managed past Microsoft Intune. As of writing, this is only available for iOS devices, simply would much likely exist extended for other platforms in the future releases.

Setting upwardly device blazon restrictions

Like nosotros discussed before, we tin restrict what device type platforms nosotros want to let when devices are enrolled. An example would be where we've configured to only allow iOS devices to enrol. In the effect that an stop user attempts to enrol an Android device, this functioning would exist blocked from enrolling. Let's have a look at how this scenario is configured.

1. Begin with logging into the Azure portal at portal.azure.com.
2. Open up Intune (Preview). If you don't accept Intune in the left carte, click on More services and filter for Intune.
iii. Open the Enroll Devices blade.

4. Under Manage, select Enrollment Restrictions.

v. In the Enrollment Restrictions blade, in the Device Blazon Restrictions table select Default.

6. In All Users blade, select Platforms. Here you lot're given the selection to either Permit or Block a particular platform from enrolling. In this example, nosotros're just going to let iOS devices from enrolling, which would be configured as shown in the picture below.

7. Click on Salve.

8. Optionally, we have the possibility to also Allow or Block personally endemic devices (BYOD). This configuration can exist ready under the Platform Configurations settings, shown in the moving picture below.

9. Once you've made your configuration, close the blades that got open during this process.

Setting up device limit restrictions

Setting the maximum number of immune devices to enroll per user is pretty straight forward. It's done in the same Enrollment Restrictions blade as for when configuring the device type restrictions.

1. Click on the Enrol Devices blade in Intune in the Azure portal.
2. Click on Enrollment Restrictions and select Default in the table correct under Device Limit Restrictions. So select Device Limit and select the amount of devices a user is allowed to enroll.

End user enrolment experience

From an end user experience when the enrolment restrictions for device type platforms have been blocked for a certain platform, is shown with a popup during the registration stage when enrolling the device. Going back to the scenario that we discussed previously where only iOS devices where allowed to enrol, when an Android device is enrolled the user will be prompted with this (sorry for the Swedish):

The message states "Could non enroll the device", and the rest if hopefully pretty clear. In my opinion, it's great that we get an error bulletin that the end user can interpret, but I'd like this to be shown much earlier in the enrollment feel. Hopefully, this will exist improved in one case Intune in Azure becomes general bachelor, but for now I think this is something that many organizations take been waiting for, and should definitely take a look at.

(8754)

Nickolaj Andersen

Principal Technical Architect and Enterprise Mobility MVP since 2016. Nickolaj has been in the It manufacture for the by ten years specializing in Enterprise Mobility and Security, Windows devices and deployments including automation. Awarded as PowerShell Hero in 2015 by the customs for his script and tools contributions. Creator of ConfigMgr Prerequisites Tool, ConfigMgr OSD FrontEnd, ConfigMgr WebService to name a few. Frequent speaker at conferences such equally Microsoft Ignite, NIC Briefing and IT/Dev Connections including nordic user groups.