question

LazherYAAKOUBI-7887 avatar image
0 Votes"
LazherYAAKOUBI-7887 asked LuDaiMSFT-0289 commented

Intune device restriction scope

Hi,


I have a question about the scope to apply device restriction policy, all devices (IOS) are enrolled with the app company portal, and when i create a configuration profile (device restriction), I see some settings are applied with the type of enrollment. in doc. MS I found this :

201557-image.png



what's means?

Thanks

mem-intune-device-configurations
image.png (28.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered LuDaiMSFT-0289 commented

@LazherYAAKOUBI-7887 Thanks for posting in our Q&A.

For iOS enrollment, there are 5 methods:
https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment#iosipados-enrollment-methods

And enrollment is divided as device enrollment and user enrollment. If we select "User enrollment" in Enrollment type, it will be known as user enrollment. If you don't configure or select "device enrollment", it will be known as device enrollment.
https://docs.microsoft.com/en-us/mem/intune/enrollment/ios-user-enrollment#create-a-user-enrollment-profile-in-intune

When we configure the restriction policy, we are needed to know what method we used to enroll the iOS.

Hope it will address your confusion.


If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Actually, I used the app company portal to enroll devices, so what policy can I apply.

Thanks

0 Votes 0 ·
LuDaiMSFT-0289 avatar image LuDaiMSFT-0289 LazherYAAKOUBI-7887 ·

@LazherYAAKOUBI-7887 It seems that you use BYOD enrollment method. As I said before, please check if you configured in Devices > Enroll devices > Apple enrollment > Enrollment type. If not, it is device enrollment.

So, we can configure all the settings that are under "All enrollment types" and "Device enrollment". For example:
201751-image.png

Hope it will help.


1 Vote 1 ·
image.png (58.8 KiB)