Configuring device restrictions

Device restrictions are an often overlooked yet critical part of managing your Intune environment. With the inclusion of MAM across platforms, the first step is to block the enrollment of personal devices, which can only be performed within Intune.

You can also specify device limits, as well as operating system versions and even manufacturers and models of devices!

How to do it…

There are two different settings to configure here: device limit restrictions and device platform restrictions. We will look at device limit restrictions first.

Device limit restrictions

To set up device limit restrictions, follow these steps:

1. Click on Devices, then Enrollment.
2. Select any platform and click Device limit restriction.

   Here, you can create new restrictions or edit the default restriction, which applies to all. The restrictions are queried in numerical order, with the highest number being queried first. When it finds the restriction...