Force login for device provisioning

Question

Hello,

We want to know if the option that appears in red in the attached photo can be disabled either by GPO or by INTUNE, we want to ensure that all the devices that consume resources of our TENANT are registered.

Answer 1

@Cloud Backup MM , For the picture, we would like to confirm if it is coming after we login one application. If yes, the option is controlled by application.

But if we want to ensure the user access company resource via a register device, we can look into conditional access to see if ti can help.
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview

For example, we can control Azure AD join device to access via filter for device:
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices

If we want the device enroll into Intune, we can consider the option "Require device to be marked as compliant"
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

This should address the concern/issue: https://msendpointmgr.com/2021/03/11/are-you-tired-of-allow-my-organization-to-manage-my-device/