Is mdm devId stored in any registry key and how is this devId created

Question

Is mdm devId stored in any registry key and how is this devId created

Bevan Thomas 60

Is mdm devId stored in any registry key and how is this devId created?
Is it related to the hardware serial number and does it change during a device lifetime

3 answers

Your answer

Answer 1

This deviceid is used when it reaches out to manage.microsoft.com (intune)https://r.manage.microsoft.com/devicegatewayproxy/cimhandler.ashx

In the request you will notice the DevId:

An unique device identifier. An application-specific global unique device identifier is provided in this node.

UseHWDevID node of the DMAcc configuration service provider can be used to modify the return value to instead return a hardware device ID as follows:

For GSM phones, the IMEI is returned.

For CDMA phones, the MEID is returned.

For dual SIM phones, this value is retrieved from the UICC of the primary data line.

For Windows 10 for desktop editions (Home, Pro, Enterprise, and Education), an application specific global unique identifier (GUID) is returned irrespective of the value of UseHWDevID.

https://learn.microsoft.com/en-us/windows/client-management/mdm/devinfo-csp

You can also use the localmdm tool to fetch it...

Send-LocalMDMRequest -OmaUri ./DevInfo/DevId

CmdId : 1

Cmd : Get

Status : 200

OmaUri : ./DevInfo/DevId

Data : idfromtheregistry :)

Answer 2

Crystal-MSFT 53,991 Microsoft External Staff

@Bevan Thomas, Thanks for posting in Q&A. For the evid, did you mean Intune device id? If yes, based as I know, the Mobile Device Management (MDM) registration enrolls a device into a management service, The device ID is created by the MDM server and is unique to each device. It is not related to the hardware serial number and can change during the device's lifetime if the device is wiped and re-enrolled in the MDM service.

For the Intune device Id, you can find it in "EntDMID" under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\GUID\DMClient\MS DM Server

Edit the reply.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Rudy Ooms 701 Reputation points MVP

2023-11-28T11:15:04.12+00:00

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\guid of enrollment\DMClient\MS DM Server --> entdmid?

As sfaik that entdmid corresponds with the intune device id in intune
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-11-29T02:16:39.49+00:00

@Rudy Ooms, Thanks for the reply. After checking , I find the Intune device ID is the same one as "EntDMID" under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\GUID\DMClient\MS DM Server. Thanks for your information.
Bevan Thomas 60 Reputation points

2023-11-29T06:58:24.7866667+00:00

I was talking about this..is it generated by the device?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-11-29T07:28:57.67+00:00

@Bevan Thomas, Thanks for the reply. The MDMDeviceID is generated by the device during the enrollment process with Intune for MDM, and it is used to identify and manage the device within Intune. But the value is not the same as Intune device ID or serial number. Thanks!
Bevan Thomas 60 Reputation points

2023-12-14T09:26:25.38+00:00

Hi, can we change this MDMDeviceID without breaking the enrollment
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-12-15T01:50:05.74+00:00

@Bevan Thomas, Thanks for posting in Q&A. For your question, I would like to say No, changing the MDMDeviceID can break the enrollment. The MDMDeviceID is a unique identifier for the device that is used for enrollment and management. Changing it can cause issues with policies and configurations that are tied to the original MDMDeviceID. It is recommended to not change the MDMDeviceID unless absolutely necessary.
Bevan Thomas 60 Reputation points

2023-12-22T04:50:04.11+00:00

Hi, actually I was asking this because on resetting the device this ID changes, is there a way I can enroll this device with the same MDM DeviceID. Also, in intune basically the device re-enrolls. I wanted to know how Intune identifies it as an old device ... is it comparing with some hardware properties like mac or serial number?
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-12-25T06:00:26.6166667+00:00

@Bevan Thomas, Thanks for the reply. Intune identifies an enrolled device by its MDM certificate, which is installed on the device during enrollment. When a device is reset, the MDM certificate is removed, and the device must re-enroll to receive a new MDM certificate. Therefore, it is not possible to enroll a device with the same MDM DeviceID after it has been reset. Intune uses the device's hardware properties, such as its serial number, to confirm that the device has been previously enrolled. This is why during enrollment, Intune asks for the last four characters of the device's serial number to confirm that the device has been previously enrolled.

Answer 3

Bevan Thomas 60

Hi @Crystal-MSFT , intune asking for last four characters of device serial number during enrollment, is it the internal working because I didnt provide any serial number during enrollment

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2024-01-02T01:11:37.0533333+00:00

@Bevan Thomas, Thanks for the reply. During Intune enrollment, required data will be collected. Serial number is one which will be collected. Here is a link list the data collected for your reference.

https://learn.microsoft.com/en-us/mem/intune/protect/privacy-data-collect#required-data

Share via

Is mdm devId stored in any registry key and how is this devId created

3 answers

Your answer