Identify devices as corporate-owned
|Applies to: Intune in the Azure portal|
|Looking for documentation about Intune in the classic portal? Read this introduction to Intune.|
As an Intune admin, you can identify devices as corporate-owned to refine management and identification. Intune can perform additional management tasks and collect additional information such as the full phone number and an inventory of apps from corporate-owned devices. You can also set device restrictions to block enrollment by devices that aren't corporate-owned.
At the time of enrollment, Intune automatically assigns corporate-owned status to devices that are:
- Enrolled with a device enrollment manager account (all platforms)
- Enrolled with the Apple Device Enrollment Program, Apple School Manager, or Apple Configurator (iOS only)
- Identified as corporate-owned before enrollment with an international mobile equipment identifier (IMEI) numbers (all platforms with IMEI numbers) or serial number (iOS and Android)
- Registered in Azure Active Directory or Enterprise Mobility + Security as a Windows 10 Enterprise device
- Set as corporate in the device's properties list
After enrollment, you can change the ownership setting between Personal and Corporate.
Identify corporate-owned devices with IMEI or serial number
As an Intune admin, you can create and import a comma-separated value (.csv) file that lists IMEI numbers or serial numbers. Intune uses these identifiers to specify device ownership as corporate during device enrollment. You can declare IMEI numbers for all supported platforms. You can only declare serial number for iOS, macOS, and Android devices. Each IMEI or serial number can have details specified in the list for administrative purposes.
Add corporate identifiers
To create the list, create a two-column, comma-separated value (.csv) list without a header. Add the IMEI or serial numbers in the left column, and the details in the right column. Only one type of ID, IMEI or serial number, can be imported in a single .csv file. Details are limited to 128 characters and are for administrative use only. Details aren't displayed on the device. The current limit is 5,000 rows per .csv file.
Upload a .csv file that has serial numbers – Create a two-column, comma-separated value (.csv) list without a header, and limit the list to 5,000 devices or 5 MB per .csv file.
|<ID #1>||<Device #1 Details>|
|<ID #2>||<Device #2 Details>|
This .csv file when viewed in a text editor appears as:
01234567890123,device details 02234567890123,device details
Some Android devices have multiple IMEI numbers. Intune only reads one IMEI number per enrolled device. If you import an IMEI number but it is not the IMEI inventoried by Intune, the device is classified as a personal device instead of a company-owned device. If you import multiple IMEI numbers for a device, uninventoried numbers display Unknown for enrollment status.
Also note: Android Serial numbers are not guaranteed to be unique or present. Check with your device supplier to understand if serial number is a reliable device ID. Serial numbers reported by the device to Intune might not match the displayed ID in the Android Settings/About menus on the device. Verify the type of serial number reported by the device manufacturer.
Add a .csv list of corporate identifiers
In Intune in the Azure portal, choose Device enrollment > Corporate device identifiers, and then click Add.
In the Add Identifiers blade, specify the identifier type: IMEI or Serial. You can specify whether previously imported numbers should Overwrite details for existing identifiers.
Click the folder icon and specify the path to the list you want to import. Navigate to the .csv file, and select Add. You can click Refresh to see new device identifiers.
Imported devices are not necessarily enrolled. Devices can have a state of either Enrolled or Not contacted. Not contacted means that the device has never communicated in with the Intune service.
Delete corporate identifiers
- In Intune in the Azure portal, choose Device enrollment > Corporate device identifiers.
- Select the device identifiers you want to delete, and choose Delete.
- Confirm the deletion.
Deleting a corporate identifier for an enrolled device does not change the device's ownership. To change a device's ownership, go Devices, select the device, choose Properties, and change Device ownership.
For detailed specifications about International Mobile Equipment Identifiers, see 3GGPP TS 23.003.
Change device ownership
Devices properties display Ownership for each device records in Intune. As an admin, you can specify devices as Personal or Corporate.
To change device ownership:
- In Intune in the Azure portal, go to Devices and choose the device.
- Choose Properties.
Specify Device ownership as Personal or Corporate.