Identify devices as corporate-owned
As an Intune admin, you can identify devices as corporate-owned to refine management and identification. Intune can perform additional management tasks and collect additional information such as the full phone number and an inventory of apps from corporate-owned devices. You can also set device restrictions to block enrollment by devices that aren't corporate-owned.
At the time of enrollment, Intune automatically assigns corporate-owned status to devices that are:
- Enrolled with a device enrollment manager account (all platforms)
- Enrolled with the Apple Device Enrollment Program, Apple School Manager, or Apple Configurator (iOS/iPadOS only)
- Identified as corporate-owned before enrollment with an international mobile equipment identifier (IMEI) numbers (all platforms with IMEI numbers) or serial number (iOS/iPadOS and Android)
- Joined to Azure Active Directory with work or school credentials. Devices that are Azure Active Directory registered will be marked as personal.
- Set as corporate in the device's properties list
After enrollment, you can change the ownership setting between Personal and Corporate.
Identify corporate-owned devices with IMEI or serial number
As an Intune admin, you can create and import a comma-separated value (.csv) file that lists 14-digit IMEI numbers or serial numbers. Intune uses these identifiers to specify device ownership as corporate during device enrollment. Each IMEI or serial number can have details specified in the list for administrative purposes.
This feature is supported for the following platforms:
|Platform||IMEI numbers||Serial numbers|
|Windows||Not supported||Not supported|
|iOS/iPadOS||Supported in some cases. See Important below.||Supported|
|Android device administrator, before Android v10||Supported||Supported|
|Android device administrator, Android v10 and later||Not supported||Not supported|
|Android Enterprise personally-owned work profile, before Android 12||Supported||Supported|
|Android Enterprise personally-owned work profile, Android 12 and later||Not supported||Not supported|
|Android Enterprise corporate-owned work profile||Not supported||Not Supported|
|Android Enterprise fully managed||Not supported||Not Supported|
|Android Enterprise dedicated devices||Not supported||Not supported|
Add corporate identifiers by using a .csv file
To create the list, create a two-column, comma-separated value (.csv) list without a header. Add the 14-digit IMEI or serial numbers in the left column, and the details in the right column. Only one type of ID, IMEI or serial number, can be imported in a single .csv file. Details are limited to 128 characters and are for administrative use only. Details aren't displayed on the device. The current limit is 5,000 rows per .csv file.
Upload a .csv file that has serial numbers – Create a two-column, comma-separated value (.csv) list without a header, and limit the list to 5,000 devices or 5 MB per .csv file.
This .csv file when viewed in a text editor appears as:
01234567890123,device details 02234567890123,device details
Some Android and iOS/iPadOS devices have multiple IMEI numbers. Intune only reads one IMEI number per enrolled device. If you import an IMEI number but it is not the IMEI inventoried by Intune, the device is classified as a personal device instead of a corporate-owned device. If you import multiple IMEI numbers for a device, uninventoried numbers display Unknown for enrollment status.
Also note: Serial Numbers are the recommended form of identification for iOS/iPadOS devices. Android Serial numbers are not guaranteed to be unique or present. Check with your device supplier to understand if serial number is a reliable device ID. Serial numbers reported by the device to Intune might not match the displayed ID in the Android Settings/About menus on the device. Verify the type of serial number reported by the device manufacturer. Attempting to upload a file with serial numbers containing dots (.) will cause the upload to fail. Serial numbers with dots are not supported.
Upload a .csv list of corporate identifiers
Sign in to the Microsoft Endpoint Manager admin center, choose Devices > Enroll devices > Corporate device identifiers > Add > Upload CSV file.
In the Add identifiers blade, specify the identifier type: IMEI or Serial.
Click the folder icon and specify the path to the list you want to import. Navigate to the .csv file, and choose Add.
If the .csv file contains corporate identifiers that are already in Intune, but have different details, the Review duplicate identifiers popup appears. Select the identifiers that you want to overwrite into Intune and choose Ok to add the identifiers. For each identifier, only the first duplicate will be compared.
Manually enter corporate identifiers
Sign in to the Microsoft Endpoint Manager admin center, choose Devices > Enroll devices > Corporate device identifiers > Add > Enter manually.
In the Add identifiers blade, specify the identifier type: IMEI or Serial.
Enter the Identifier and Details for each identifier you want to add. When you're done entering identifiers, choose Add.
If you entered corporate identifiers that are already in Intune, but have different details, the Review duplicate identifiers popup appears. Select the identifiers that you want to overwrite into Intune and choose Ok to add the identifiers. For each identifier, only the first duplicate will be compared.
You can click Refresh to see new device identifiers.
Imported devices are not necessarily enrolled. Devices can have a state of either Enrolled or Not contacted. Not contacted means that the device has never communicated in with the Intune service.
Delete corporate identifiers
- Sign in to the Microsoft Endpoint Manager admin center, choose Devices > Enroll devices > Corporate device identifiers.
- Select the device identifiers you want to delete, and choose Delete.
- Confirm the deletion.
Deleting a corporate identifier for an enrolled device does not change the device's ownership. To change a device's ownership, go Devices, select the device, choose Properties, and change Device ownership.
For detailed specifications about International Mobile Equipment Identifiers, see 3GGPP TS 23.003.
Change device ownership
Devices properties display Ownership for each device records in Intune. As an admin, you can specify devices as Personal or Corporate. When a device's ownership type is changed from Corporate to Personal, Intune deletes all app information previously collected from that device within 7 days. If applicable, Intune will also delete the phone number on record.
To change device ownership:
Sign in to the Microsoft Endpoint Manager admin center, choose Devices > All devices > choose the device.
Specify Device ownership as Personal or Corporate.
You can configure a push notification to send to both your Android and iOS/iPadOS Company Portal users when their device ownership type has been changed from Personal to Corporate as a privacy courtesy.
When a device's ownership type is changed from Corporate to Personal, Intune deletes all app information previously collected from that device within 7 days. If applicable, Intune will also delete the phone number on record. Intune will still collect an inventory of apps installed by the IT admin on the device and will still collect a partial phone number for the device after it is marked as personal.
This setting can be found in the Microsoft Endpoint Manager by selecting Tenant administration > Customization. For more information, see Company Portal - Configuration.