Exclude unregistered Android device in Intune from Conditional access policy

Question

Is it possible to exclude unregistered android device from conditional access policy in Intune to allow user to login on this device without registration.

For example using request ID.

I don't want to exclude per User, I don't want users to access the accounts from all devices.

Thnaks

Answer 1

You cannot exclude one device that is unknown to the tenant (Unregistered) from Conditional Access Policies. There is no way to identify it. As soon as it is registered, you have a Device ID you can filter with. If the device is registered, that does not mean it needs to be enrolled in Intune.

Answer 2

@walid issa Thanks for posting in our Q&A. From your description, did you mean that you don't want users access corporate data in unenrolled android devices? If there is anything misunderstanding, please correct me.

Based on my understanding, when we select "Require device to be marked as compliant" in grant access, it will block all users access to corporate data in unenrolled devices.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.