I am very new to Intune. I would like to create a group policy in AD that restricts the enrollment of devices in Intune, which should be simple. However, I cannot figure out how to do it. How can I accomplish this in Intune? Thanks for the help.
Kurt
You may setup multiple restrictions in Intune , you may take a look at:
https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set
anonymous user, Thanks for posting in our Q&A. Based on my research, I didn't find any GPO setting that can restrict enrollment of devices into Intune. In General, before user enroll their devices into Intune, the user must be assigned an Intune license. If the user is not with license assigned, the enrollment will not be successful. We can see more details in the following link:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/licenses-assign
To restrict some specific type of devices to enroll into Intune, we can set enrollment restrictions according to the article which Reza mentioned.
Hope it can help.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
anonymous user, How's everything going? Is there anything unclear in our previous post. If yes, feel free to let us know.
See https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy for complete details of auto enrollment for hybrid Azure AD domain join including which GPO to configure.
3 people are following this question.
