Identify devices as corporate-owned

As an Intune admin, you can identify devices as corporate-owned to refine management and identification. Intune can perform additional management tasks and collect additional information such as the full phone number and an inventory of apps from corporate-owned devices. You can also set device restrictions to block enrollment by devices that aren't corporate-owned.

At the time of enrollment, Intune automatically assigns corporate-owned status to devices that are:

After enrollment, you can change the ownership setting between Personal and Corporate.

Identify corporate-owned devices with IMEI or serial number

As an Intune admin, you can create and import a comma-separated value (.csv) file that lists IMEI numbers or serial numbers. Intune uses these identifiers to specify device ownership as corporate during device enrollment. You can declare IMEI numbers for all supported platforms. You can only declare serial number for iOS, macOS, and Android devices. Each IMEI or serial number can have details specified in the list for administrative purposes.

Learn how to find an Apple device serial number.
Learn how to find your Android device serial number.

Add corporate identifiers by using a .csv file

To create the list, create a two-column, comma-separated value (.csv) list without a header. Add the IMEI or serial numbers in the left column, and the details in the right column. Only one type of ID, IMEI or serial number, can be imported in a single .csv file. Details are limited to 128 characters and are for administrative use only. Details aren't displayed on the device. The current limit is 5,000 rows per .csv file.

Upload a .csv file that has serial numbers – Create a two-column, comma-separated value (.csv) list without a header, and limit the list to 5,000 devices or 5 MB per .csv file.

<ID #1> <Device #1 Details>
<ID #2> <Device #2 Details>

This .csv file when viewed in a text editor appears as:

01234567890123,device details
02234567890123,device details

Important

Some Android devices have multiple IMEI numbers. Intune only reads one IMEI number per enrolled device. If you import an IMEI number but it is not the IMEI inventoried by Intune, the device is classified as a personal device instead of a company-owned device. If you import multiple IMEI numbers for a device, uninventoried numbers display Unknown for enrollment status.
Also note: Android Serial numbers are not guaranteed to be unique or present. Check with your device supplier to understand if serial number is a reliable device ID. Serial numbers reported by the device to Intune might not match the displayed ID in the Android Settings/About menus on the device. Verify the type of serial number reported by the device manufacturer. Attempting to upload a file with serial numbers containing dots (.) will cause the upload to fail. Serial numbers with dots are not supported.

Upload a .csv list of corporate identifiers

  1. In Intune in the Azure portal, choose Device enrollment > Corporate device identifiers > Add > Upload CSV file.

    Corporate device identifier workspace with the Add button highlighted

  2. In the Add identifiers blade, specify the identifier type: IMEI or Serial.

  3. Click the folder icon and specify the path to the list you want to import. Navigate to the .csv file, and choose Add.

  4. If the .csv file contains corporate identifiers that are already in Intune, but have different details, the Review duplicate identifiers popup appears. Select the identifiers that you want to overwrite into Intune and choose Ok to add the identifiers. For each identifier, only the first duplicate will be compared.

Manually enter corporate identifiers

  1. In Intune in the Azure portal, choose Device enrollment > Corporate device identifiers > Add > Enter manually.

  2. In the Add identifiers blade, specify the identifier type: IMEI or Serial.

  3. Enter the Identifer and Details for each identifier you want to add. When you're done entering identifiers, choose Add.

  4. If you entered corporate identifiers that are already in Intune, but have different details, the Review duplicate identifiers popup appears. Select the identifiers that you want to overwrite into Intune and choose Ok to add the identifiers. For each identifier, only the first duplicate will be compared.

You can click Refresh to see new device identifiers.

Imported devices are not necessarily enrolled. Devices can have a state of either Enrolled or Not contacted. Not contacted means that the device has never communicated in with the Intune service.

Delete corporate identifiers

  1. In Intune in the Azure portal, choose Device enrollment > Corporate device identifiers.
  2. Select the device identifiers you want to delete, and choose Delete.
  3. Confirm the deletion.

Deleting a corporate identifier for an enrolled device does not change the device's ownership. To change a device's ownership, go Devices, select the device, choose Properties, and change Device ownership.

IMEI specifications

For detailed specifications about International Mobile Equipment Identifiers, see 3GGPP TS 23.003.

Change device ownership

Devices properties display Ownership for each device records in Intune. As an admin, you can specify devices as Personal or Corporate.

To change device ownership:

  1. In Intune in the Azure portal, go to Devices and choose the device.

  2. Choose Properties.

  3. Specify Device ownership as Personal or Corporate.

    Device properties showing Device category and Device ownership options