Understand Intune and Azure AD device limit restrictions

Applies to

  • Android
  • iOS
  • macOS
  • Windows 10
  • Windows 11

Device limit restrictions can be configured two ways:

  • Intune enrollment
  • Azure Active Directory (AD) joined or Azure AD registered

This article clarifies when these limits are applied based on your configuration.

Intune device limit restrictions

Intune device limit restrictions set the maximum number of devices that a user can control (maximum setting is 15). To set this Device limit, go to Microsoft Endpoint Manager admin center > Devices > Enrollment restrictions. For more information, see Create a device limit restriction.

Azure device limit restriction

Azure device limit restrictions set the maximum number of devices that either Azure AD joins or Azure AD registers. To set the Maximum number of devices per user, go to the Azure portal > Azure Active Directory > Devices. For more information, see Configure device settings

Settings applied based on user affinity

If you have both Intune and Azure device limit restrictions set, the following table shows you what is applied based on your user affinity setting.

Device platform User affinity Azure applies Intune applies
Android Enterprise personally-owned work profile Yes Yes Yes
Android Enterprise dedicated device No No No
Android Enterprise fully managed Yes Yes Yes
Android Enterprise corporate-owned work profile Yes Yes Yes
Android device administrator Yes Yes Yes
Android device administrator DEM No No
iOS/macOS BYOD Yes Yes Yes
iOS/macOS Automated Device Enrollment (ADE) Yes Yes Yes
Windows BYOD Yes Yes Yes
Windows MD-only Yes Yes
Windows Azure AD joined Yes Yes No
Windows Autopilot Yes Yes No
Windows hybrid Azure AD joined No No Yes
Windows co-management No Yes No
Windows DEM No Yes No
Windows bulk enrollment No Yes No

Android and iOS devices

iOS or Android devices example 1

  • The Azure Maximum number of devices per user setting is set to 3.
  • The Intune Device limit setting is set to 5.

Outcome: The maximum number is per user. For example, if you enroll three Intune devices, the Azure registration for the fourth device will fail because of the settings to limit the number of registrations for the devices.

iOS or Android devices example 2

  • The Azure Maximum number of devices per user setting is set to 20.
  • The Intune Device limit setting is set to 2.

Outcome: You can successfully register and enroll two devices. Intune enrollment will be blocked for any additional devices. ADE without user affinity is restricted by Azure device registration limits although it's not associated with a user.

Windows devices

Intune device limit restrictions don't apply for the following Windows enrollment types:

  • Co-managed enrollments
  • Group policy object (GPO) enrollments
  • Azure AD joined enrollments
  • Bulk Azure AD joined enrollments
  • Autopilot enrollments
  • Device enrollment manager enrollments

You can't enforce device limit restrictions for these enrollment types because they're considered shared device scenarios. You can set hard limits for these enrollment types in Azure Active Directory.

For the device limit restriction in Azure, the Maximum number of devices per user setting applies to devices that are either Azure AD joined or Azure AD registered. This setting doesn't apply to hybrid Azure AD joined devices.

Windows 10/11 example 1

  • The Azure Maximum number of devices per user setting is set to 5.
  • The Intune Device limit setting is set to 3.
  • The devices are hybrid Azure AD joined and enrolled automatically (GPO configured).

Outcome: Because the enrollment is pushed through GPO, the Azure device registration limit doesn't apply. The Intune device limit restriction also doesn't apply.

Windows 10/11 example 2

  • The Azure Maximum number of devices per user setting is set to 5.
  • The Intune Device limit setting is set to 2.
  • The devices are local domain joined and enrolled by using Settings > Access Work or School > Connect.

Outcome: You can only enroll two devices before they're blocked. You can register up to five devices.

Next steps