Skip to content

Commit 0317fbe

Browse files
authored
Update enrollment-restrictions-set.md
Updated note
1 parent 5761fa8 commit 0317fbe

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

memdocs/intune/enrollment/enrollment-restrictions-set.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -140,7 +140,7 @@ Intune also blocks personal devices using these enrollment methods:
140140
- **Allow min/max range** (Android, Windows, iOS/iPadOS only): Enter the minimum and maximum OS versions allowed to enroll. Supported version formats include:
141141
- Android device administrator and Android Enterprise work profile support major.minor.rev.build.
142142
- iOS/iPadOS supports major.minor.rev.
143-
> [!TIP] This setting isn't applicable to Apple devices that enroll with the Device Enrollment Program, Apple School Manager, or the Apple Configurator app. Althought Intune doesn't block ADE enrollments that authenticate with Company Portal, not meeting OS requirements impacts the registration of these devices because they can't create the Azure AD Device record used to evaluate Conditional Access policies. You can tell that this is the case if device users receive an error message that says "Couldn't map device record with a user" after they sign in to Company Portal.
143+
> [!TIP] The min/max range isn't applicable to Apple devices that enroll with the Device Enrollment Program, Apple School Manager, or the Apple Configurator app. Althought Intune doesn't block ADE enrollments that authenticate with Company Portal, not meeting OS requirements impacts the registration of these devices because they can't create the Azure AD Device record used to evaluate Conditional Access policies. You can tell that this is the case if a device user receives an error message that says "Couldn't map device record with a user" after they sign in to Company Portal.
144144
- Windows supports major.minor.build.rev for Windows 10 and Windows 11 only.
145145
- **Personally-owned**: Select **Allow** to permit devices to enroll and operate as personal devices.
146146
- **Device manufacturer**: Enter a comma-separated list of the manufacturers that you want to block.

0 commit comments

Comments
 (0)