This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 15%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENS%3C/text%3E%3C/svg%3E)
Hi All,
My company don't want the users personal Android and iOS devices to enroll by themselves in to Microsoft Intune, At the same time, if any users wanted to use their personal devices, they should reach out to helpdesk to enroll their personal IOS and Android mobiles to Microsoft Intune.
In thought of using the below steps, but i need experts advice on the below.
In this case, can i block the device enrollment of IOS and Android for byod devices in device enrollment restrictions, and then can we ask the helpdesk to use the device enrollment manager account to enroll users personal devices (Android and IOS) in to Microsoft Intune ?
Can we use the device enrollment manager account in the below enrollment methods to enroll users Android and IOS personal devices ?
"user enrollment with company profile" for IOS personal devices
"Android for Work profile" for Android BYOD devices
DEM is not meant for byod scenarios. What I’ll suggest is that you create a custom enrollment restriction policy blocking the enrollment of personal mobile devices and assign to users and set it with higher priority. When users contact SD, SD can then remove the user from the group and allow the default enrollment restriction policy to apply.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 35%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZM%3C/text%3E%3C/svg%3E)
@Nithyanandham Singaravadivelu, If the answer is helpful, please click "Accept Answer" and kindly upvote it to help others with the same problem as soon as possible.
@Nithyanandham Singaravadivelu, Thanks for posting in Q&A.
Based on my research, if you restrict the registration of personal Android and iOS devices to Intune, then the BYOD enrollment method is not applicable to Android and iOS devices, but if you want to enroll personal devices to Intune, you need to use the following Corporate ownership method to enroll Android and iOS devices to Intune.
And above methods will enroll the devices to the Intune using Corporate's Ownership.
Hope above information can be helpful, if there is any unclear, feel free to let me know.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Nithyanandham Singaravadivelu, Hope things going well.
May I know the above information is helpful? If there is any update, feel free to contact me.
@Nithyanandham Singaravadivelu, Hope you are doing well.
If the answer is helpful, please click "Accept Answer" and kindly upvote it to help others with the same problem as soon as possible.