Enrollment options for devices managed by Intune

As an Intune admin, you can configure device enrollment to help users and enable Intune capabilities. Intune includes the following enrollment options:

Terms and conditions

You can require that users accept your company's terms and conditions before they can use the Company Portal to enroll their devices and access resources like company apps and email. Configuration of terms and conditions is optional. Learn more about terms and conditions.

Enrollment restrictions

You can choose to restrict device enrollment by:

• Device platform
• Number of devices per user
• Block personal devices

Learn more about enrollment restrictions.

Enable Apple device enrollment

An MDM push certificate is required for iOS/iPadOS and macOS device enrollment. Learn more about MDM push certificates.

Corporate identifiers

You can list international mobile equipment identifier (IMEI) numbers and serial numbers to identify corporate-owned devices. Learn more about corporate identifiers.

Multi-factor authentication

You can require users to use an additional verification method, such as a phone, PIN or biometric data, when they enroll a device. Learn more about multi-factor authentication.

Device enrollment manager

You can make users device enrollment managers. DEM users can enroll large numbers of mobile devices with a single user account. The device enrollment manager (DEM) account can enroll up to 1,000 devices. Learn more about device enrollment managers.

Device categories

You can use device categories to automatically add devices to groups based on categories that you define. Organizing devices into groups makes it easier for you to manage those devices. Learn more about device categories.