Device Enrollment
Device enrollment brings devices under Intune management. Choose the enrollment method based on platform, ownership model, and desired management control.
Enrollment by Platform
Windows
| Method | Ownership | Description |
|---|---|---|
| Autopilot | Corporate | Zero-touch provisioning |
| Azure AD Join | Corporate | Manual join with auto-MDM |
| Hybrid Azure AD Join | Corporate | Domain-joined with cloud management |
| BYOD Enrollment | Personal | User enrolls through Settings |
macOS
| Method | Ownership | Description |
|---|---|---|
| ADE | Corporate | Apple Business Manager zero-touch |
| Device Enrollment | Both | User-initiated via Company Portal |
| Apple Configurator | Corporate | USB-based provisioning |
iOS/iPadOS
| Method | Ownership | Description |
|---|---|---|
| ADE | Corporate | Zero-touch through Apple Business Manager |
| Device Enrollment (User) | Personal | User enrolls via Company Portal |
| Apple Configurator | Corporate | USB setup for non-ABM devices |
Android
| Method | Ownership | Description |
|---|---|---|
| Work Profile (BYOD) | Personal | Separate container for work data |
| Corporate Work Profile | Corporate | Full management with work profile |
| Fully Managed | Corporate | Complete device control |
| Dedicated (Kiosk) | Corporate | Single or multi-app kiosk mode |
Enrollment Status Page (ESP)
The ESP shows setup progress during Windows enrollment:
- Device setup phase (policies, certificates, network profiles)
- Account setup phase (apps, additional policies)
- Configurable timeout and error handling
- Option to block device use until setup completes
Enrollment Restrictions
- Platform restrictions — Allow or block specific platforms
- Device limit — Maximum devices per user (default: 15)
- OS version — Minimum and maximum OS versions
- Personally owned — Block personal device enrollment
Prerequisites
- Valid Intune license assigned to the user
- MDM Authority set to Intune
- Platform-specific setup completed
- Network connectivity to Intune endpoints
API Reference
GET /api/devices/enrollment/status— Get enrollment overviewGET /api/devices/enrollment/devices— List by enrollment stateGET /api/devices/enrollment/restrictions— Get restrictionsPOST /api/devices/enrollment/restrictions— Create restriction
Last updated on