Intune Supported Device Platforms and Custom Baselines Options

Let’s learn about the Intune Supported Device Platforms and Custom Baselines options. In this post, we will explore the topic of supported device platforms and whether creating a custom baseline to limit Intune support for your organization to a specific set of devices is possible.

Microsoft’s extensive support for various device versions, you may wonder if there is a way to restrict your organization’s users with a personalized baseline policy. Let’s go into this and explore the options available to achieve your desired level of device restriction within the Intune environment.

Intune Design Decisions Free Training | Version 1 Starter Kit | Basic is the post; It shows the overview of Intune Design Decisions Free Training Videos. It includes 13 Episodes of Free Intune Design Decisions Training Videos that help you to provide a comprehensive training experience for individuals tasked with device management duties.

Microsoft Intune, a powerful cloud-based service, offers extensive support for a range of operating systems. Let’s discuss the distinctions between supported device platforms in SCCM (System Center Configuration Manager) and Intune, discuss officially supported operating system versions, and explore various aspects related to device compatibility.

Patch My PC

What are the Different Types of Devices and Platforms?

Intune Supported Device Platforms and Custom Baselines Options 1

There exists a wide range of devices encompassing various operating systems. These devices include Windows Client OS devices, iPadOS devices, Android devices, iOS devices, MacOS devices, and Server OS devices. What is Microsoft Unified Endpoint Management UEM?

What are the Intune Supported Device Platforms Vs. SCCM

Intune Supported Device Platforms and Custom Baselines Options 2

Let’s see the Intune Supported Device Platforms Vs. SCCM.

Adaptiva

1. Does Intune support all the device’s platforms?
Ans. No. Intune is not going to support all the devices. Intune is supporting only specific devices at this point of time in 2023.

2. Whether Intune support server Operating Systems or not?
Ans. Intune doesn’t support a server operating system. It is an endpoint device management platform. It only supports Windows client Operating systems.

3. Whether Intune support Virtual Devices or not?
Ans. Intune supports all virtual devices if the OS version is Windows client operating system, and Intune supports Windows 10 and 11 multi-session.

4. Whether Intune supports IOT devices?
Ans. Intune does not support the Operating system of IOT devices.

What are the Intune Supported Operating Systems?

Intune Supported Device Platforms and Custom Baselines Options 3

The Intune-supported operating systems are Android, iOS/iPadOS, Linus, macOS, Windows, and Chrome OS. Click the hyperlink to learn more about Intune – What is Microsoft Intune?

Intune Supported Device Platforms | Custom Baselines – Video 1

In this video series, we have delved into various topics, covering various aspects of Intune and its functionalities. We explored important areas like Intune-supported device platforms, Intune-supported operating systems, Intune-supported Operating system Versions, and custom baseline policies for your organization to set up Intune device restrictions and device type restrictions, etc.

Intune Supported Device Platforms | Custom Baselines – Video 1

Intune Supported Operating System Versions

The below table helps you to show the Intune-supported operating system versions. It includes the Operating system and its versions.

Operating SystemVersionsVersionsVersions
Android8.0 and laterAndroid EnterpriseAndroid open source project device (AOSP)
iOS14.0 and later
iPadOS14.0 and later
Linux with a GNOME graphical desktop environmentUbuntu Desktop 22.04.1 LTSUbuntu Desktop 22.04.1 LTS
macOS11.0 and later
WindowsWin 10/11HolographicSurface Hub (MS Teams)
Chrome OSManaged by Google Workspace Management solution?
Intune Supported Device Platforms | Custom Baselines – Table 1

Intune Supported Device Platforms | Custom Baselines

Login to Intune admin portal and select the Devices tab on the left side of Intune portal. Select Enroll Devices from Devices. The Enroll devices show different options such as Windows enrollment, Apple enrollment, and the Enrollment device platform restrictions. Select Enrollment device platform restrictions from Enroll devices.

The Enrollment device platform restrictions include different types of restrictions, such as

  1. Android Restrictions
  2. Windows Restrictions
  3. macOS Restrictions
  4. iOS Restrictions.

Android Restrictions

A device must comply with the highest priority enrollment restrictions assigned to its user. The highest priority should come first. The below window helps you to show how to create an Android restriction policy.

  • Select the Create restriction under Android restrictions
Intune Supported Device Platforms | Custom Baselines - fig.1
Intune Supported Device Platforms | Custom Baselines – fig.1

The create restriction includes 5 steps Basics, platform settings, scope tags, assignments, and Review + create. The Basic is the first step, and here we need to enter the Name, Description, and Platform.

  • Enter the Name and Platform as HTMD Android Enrollment Restriction Policy
Intune Supported Device Platforms | Custom Baselines - fig.2
Intune Supported Device Platforms | Custom Baselines – fig.2

Platform settings are the 2nd step in Android restriction policy creation. Specify the platform configurations that must be met for a device to enroll. Use compliance policies to restrict devices after enrollment. Define versions as major, minor, and build.

TypePlatformVersionsPersonally OwnedDevice Manufacturer
Android Enterprise (work profile)AllowAllow minimum or maximum rangeAllowManufacturer Name
Android Device AdministratorBlockAllow minimum or maximum rangeBlockManufacturer Name
Intune Supported Device Platforms | Custom Baselines – Table 2
Intune Supported Device Platforms | Custom Baselines - fig.3
Intune Supported Device Platforms | Custom Baselines – fig.3

Utilizing the role-based access control (RBAC) and scope tags is an effective strategy to ensure proper access and visibility for Intune administrators. By implementing RBAC, you can assign specific roles to administrators based on their responsibilities and grant them appropriate access levels within Intune.

  • If you don’t select a scope tag, then the Default scope tag is automatically selected.
Intune Supported Device Platforms | Custom Baselines - fig.4
Intune Supported Device Platforms | Custom Baselines – fig.4

The Assignment section helps you to include and exclude groups. You can easily add a group by clicking the Add Groups button from the below screenshot. Also, you can easily exclude a group by clicking the Add Groups button under excluded groups.

Intune Supported Device Platforms | Custom Baselines - fig.5
Intune Supported Device Platforms | Custom Baselines – fig.5

The “Review + Create” tab offers a comprehensive overview, allowing you to verify and confirm all the specified information before finalizing the creation. It summarizes the item’s attributes, ensuring everything aligns with your intended configuration.

Intune Supported Device Platforms | Custom Baselines - fig.6
Intune Supported Device Platforms | Custom Baselines – fig.6

2. Windows Restrictions

Let’s see how to create Windows device restriction policies. Windows restrictions are the 2nd position in Enrollment device platform restrictions. Select the Create Restriction option from the below window.

Intune Supported Device Platforms | Custom Baselines - fig.7
Intune Supported Device Platforms | Custom Baselines – fig.7

In the Basic tab, select the Name and Description of the Windows device restriction policies is HTMD Windows Enrollment Restriction Policy. Select the Platform as Windows 10 and Later. After entering all the details, select the Next button.

Intune Supported Device Platforms | Custom Baselines - fig.8
Intune Supported Device Platforms | Custom Baselines – fig.8

Platform settings are a straightforward method. These platform settings include the MDM, Allow min/max range, and personally owned devices. You can easily allow or Block the MDM settings.

MDMAllow Minimum or Maximum RangePersonally Owned Devices
AllowMin/MaxBlock
Intune Supported Device Platforms | Custom Baselines – Table 3
Intune Supported Device Platforms | Custom Baselines - fig.9
Intune Supported Device Platforms | Custom Baselines – fig.9

Scope tabs are the 3rd step in the Windows device restriction policies creation. If you don’t select a scope tag, then the Default scope tag is automatically selected. Assignments tabs help you to Include or exclude groups. If you want to include groups, click the Add Groups option from the below window.

Intune Supported Device Platforms | Custom Baselines - fig.10
Intune Supported Device Platforms | Custom Baselines – fig.10

The “Review + Create” tab summarizes the item’s attributes, ensuring everything aligns with your intended configuration. It shows the options such as Basics, platform settings, scope tags, etc.

Intune Supported Device Platforms | Custom Baselines - fig.11
Intune Supported Device Platforms | Custom Baselines – fig.11

MacOS Restrictions

Let’s see how to create MacOS device restriction policies. MacOS restriction is the 3rd option in Enrollment device platform restrictions. Select the Create restriction option below to create MacOS device restriction policies.

Intune Supported Device Platforms | Custom Baselines - fig.12
Intune Supported Device Platforms | Custom Baselines – fig.12

In the Basic tab, select the Name and Description of the MacOS device restriction policies is HTMD MacOS Enrollment Restriction Policy. Select the Platform as MacOS. After entering all the details, select the Next button.

Intune Supported Device Platforms | Custom Baselines - fig.13
Intune Supported Device Platforms | Custom Baselines – fig.13

MacOS platform settings are similar to Windows device restrictions. Specify the platform configuration restriction that must be met for a device to enroll. Use compliance policies to restrict devices after enrollment.

  • MDM – Allow or Block
  • Restriction not supported
  • Personally owned devices Allow or Block
Intune Supported Device Platforms | Custom Baselines - fig.14
Intune Supported Device Platforms | Custom Baselines – fig.14

Scope tabs are the 3rd step in the MacOS device restriction policies creation. If you don’t select a scope tag, then the Default scope tag is automatically selected. Assignments tabs help you to Include or exclude groups. If you want to include groups, click the Add Groups option from the below window.

Intune Supported Device Platforms | Custom Baselines - fig.15
Intune Supported Device Platforms | Custom Baselines – fig.15

The “Review + Create” tab summarizes the item’s attributes, ensuring everything aligns with your intended configuration. It shows the options such as Basics, platform settings, scope tags, etc.

Intune Supported Device Platforms | Custom Baselines - fig.16
Intune Supported Device Platforms | Custom Baselines – fig.16

iOS Restrictions

Let’s see how to create iOS device restriction policies. iOS restriction is the 4th option in Enrollment device platform restrictions. Select the Create restriction option below to create iOS device restriction policies.

Intune Supported Device Platforms | Custom Baselines - fig.17
Intune Supported Device Platforms | Custom Baselines – fig.17

In the Basic tab, select the Name and Description of the iOS device restriction policies is HTMD iOS Enrollment Restriction Policy. Select the Platform as iOS/iPadOS. After entering all the details, select the Next button.

Intune Supported Device Platforms | Custom Baselines - fig.18
Intune Supported Device Platforms | Custom Baselines – fig.18

iOS has similar options to Windows and MacOS. Allow min/max range is there in iOS restrictions. The platform settings of iOS device restriction policies creation include the following.

  • MDM – Allow or Block
  • Allow min/max range -Min/Max
  • Personally owned devices – Allow or Block
Intune Supported Device Platforms | Custom Baselines - fig.19
Intune Supported Device Platforms | Custom Baselines – fig.19

Scope tabs are the 3rd step in the iOS device restriction policies creation. If you don’t select a scope tag, then the Default scope tag is automatically selected. Assignments tabs help you to Include or exclude groups. If you want to include groups, click the Add Groups option from the below window.

Intune Supported Device Platforms | Custom Baselines - fig.20
Intune Supported Device Platforms | Custom Baselines – fig.20

The Review + Create option helps you to show the summary or overview of all the settings. It helps you to show the basic platform settings, scope tags, etc.

Intune Supported Device Platforms | Custom Baselines - fig.21
Intune Supported Device Platforms | Custom Baselines – fig.21

Device Default policy

The below window helps you to show the Default policy. The default policy is deployed to all the users. You should apply the default policy if you don’t have any custom policy.

Intune Supported Device Platforms | Custom Baselines - fig.22
Intune Supported Device Platforms | Custom Baselines – fig.22

After clicking the All users hyperlink from the above window, the below screenshot will appear. Select Properties on the left side of the below window. You can easily change the default policy settings by clicking the below Edit button.

Intune Supported Device Platforms | Custom Baselines - fig.23
Intune Supported Device Platforms | Custom Baselines – fig.23

Operating systems and browsers supported by Microsoft Intune | Microsoft Learn

Author

About Author Vidya is a computer enthusiast. She is here to share quick tips and tricks with Windows 11 or Windows 10 users. She loves writing on Windows 11 and related technologies. She is also keen to find solutions and write about day-to-day tech problems.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.