Hi everyone,
I would like to use just a DEM account to enroll the devices and prevent any user to perform the enrollment.
I have created a DEM account and set up into MEM.
In AAD should I:
In Intune, configure the MDM scope to "some", select a group where is my DEM account (leave Microsoft Intune Enrollment to "None")?
OR
In Intune, select the MDM scope to "All" + in Microsoft Intune Enrollment, select "Some" and select my group where there is my DEM account?
Thanks you in advance for your help,
Regards.



