Key Takeaways
- Microsoft Intune allows administrators to block Android device enrollment based on specific manufacturers, such as Xiaomi and Realme.
- You can edit the default restriction policy for all users or create a custom policy and assign it to specific groups.
- Administrators can modify the default restriction policy for all users or create a custom policy for specific groups.
- Blocking selected manufacturers helps organizations maintain better control over the devices used to access corporate resources.
In this post, you will learn about the process to Configure Android Manufacturer Restrictions in Microsoft Intune using Enrollment Restrictions. Device platform restrictions let you restrict enrollment based on device models. There are two types of device enrollment restrictions you can configure in Microsoft Intune, Device platform restrictions define which platforms, versions, and management types can enroll and Device limit restrictions define how many devices each user can enroll. Each restriction type comes with one default policy that you can edit and customize as needed. Intune applies the default to all user and user less enrollments until you assign a higher-priority policy.
Table of Contents
Table of Contents
Configure Android Manufacturer Restrictions in Microsoft Intune using Enrollment Restrictions
If you are interested to know how the management has evolved and the different management modes that are on Android Enterprise, Joy will be talking about Android Management in general with Intune Android Management With Intune | Android Enterprise. Let’s learn how to create enrollment notifications in Intune MEM Admin portal. Set up enrollment notifications in Microsoft Intune to notify users of newly enrolled devices, Configure Device Enrollment Notifications In Intune.
- Block Personal Windows Devices Enrollment Enrollment restrictions Options
- How To Add Android Managed Google Play App In Intune
- How to Create App Protection Policies for Windows MAM Devices
- Intune App Protection Policies for Android and iOS Devices
Block Android Device Manufacturer Enrollment in Intune
This restriction blocks device made by specific manufacturers and is applicable to Android devices only. It is in the admin center under Enrollment device platform restrictions. Sign in to the Microsoft Intune admin center Select Devices, and under Device enrollment click on Enroll Devices to configure the restrictions in the Intune admin center. In Enrollment select the option Android.
Device Platform Restriction
There are 2 options to create Intune Device-type policies. You can update the default policy, which is deployed to All Users. This policy would be a tenant-wide setting for all users. Or you can create a custom device type policy and deploy it to a set of groups. In the Enrollment device platform restrictions, Under Android restrictions, select the device type restrictions > Default > or choose the Custom restriction that you want to set.
A device must comply with the highest priority enrollment restrictions assigned to its user. You can drag a device restriction to change its priority. Default restrictions are lowest priority for all users and govern user less enrollments. Default restrictions may be edited but not deleted. When you click on the Device Platform Restriction you have to select the Default- All users option under the device type restriction.
Edit Platform Settings in Microsoft Intune
Under Device Type Restrictions, select All Users to open the Overview page. In the Overview section, select Properties to view the configured restriction settings. Scroll down to the Platform Settings section and click Edit to modify the Android device enrollment restrictions.
Platform Settings
Device platform restrictions define which platforms, versions, and management types can enroll. Here, you can restrict device platforms, OS versions, manufacturer, and personally owned devices. The Minimum OS version is already configured here, Let’s block android devices by providing specific manufacturers, For Example I want to block Xiamoi and Realme manufacturer to not enroll in Intune. Added Xiaomi, Realme together separated by commas and space in between, and click on Review + Save.
Review + Save
Save Android Manufacturer Restrictions in Microsoft Intune. After configuring the Android manufacturer restrictions, click on Review + Save to save the changes. Once the settings are saved successfully, a notification will automatically appear in the top-right corner of the Microsoft Intune admin center confirming that the restriction has been saved. You can also review the configured settings to ensure that the selected Android manufacturers are blocked from enrollment.
End User Experience
On an Android device, as soon as you install Intune Company Portal app on the device model (Xiaomi or Realme) based on our inputs above. In the enrollment process, you may receive the below message in case the device model is not supported to use by your organization.
Read more: Intune Company Portal App for Windows 11 Android | Install and Uninstall
Intune Company Portal helps and allows you, as an employee or student in your organization, to securely access those resources and install, uninstall apps, and view, edit, add and remove your enrolled devices.
After clicking the Open, you should sign in to your Company portal. The Company portal helps you access company resources and keep them secure. Select Sign in from the Company portal Window. Enter your Email address and password to Sign in to the Company Portal app on your Mobile.
After entering your work account, you may directly land on the Company Portal App without asking to set up your device to access it. You will no longer be able to manage or access company resources. Let us know your experience with the enrollment, Am I missing some prompt here?
Need Further Assistance or Have Technical Questions?
Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community and the Whatsapp channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.
Author
About Author – Jitesh, Microsoft MVP, has over six years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus is Windows 10/11 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.
Hi
Great article, do you know if it is possible to use an allow list? Like I would only allow Samsung Android Phones?
You can block all the common device manufacturers except Samsung! I don’t think, any specific settings for allowing specific models are present for now.