Skip to content

Commit 9f2620e

Browse files
authored
Update enrollment-restrictions-set.md
Trying to resolve the tip's broken formatting
1 parent 150694a commit 9f2620e

1 file changed

Lines changed: 5 additions & 2 deletions

File tree

memdocs/intune/enrollment/enrollment-restrictions-set.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -138,10 +138,13 @@ Intune also blocks personal devices using these enrollment methods:
138138
- **Platform** (Android only): Select **Allow** next to permitted platforms.
139139
- **MDM** (Windows, macOS, and iOS/iPadOS): Select **Allow** next to permitted platforms.
140140
- **Allow min/max range** (Android, Windows, iOS/iPadOS only): Enter the minimum and maximum OS versions allowed to enroll. Supported version formats include:
141+
- Windows supports major.minor.build.rev for Windows 10 and Windows 11 only.
141142
- Android device administrator and Android Enterprise work profile support major.minor.rev.build.
142143
- iOS/iPadOS supports major.minor.rev.
143-
> [!TIP] The min/max range isn't applicable to Apple devices that enroll with the Device Enrollment Program, Apple School Manager, or the Apple Configurator app. Although Intune doesn't block ADE enrollments that use Company Portal to authenticate, not meeting OS requirements impacts registration because devices can't create the Azure AD device record used to evaluate Conditional Access policies. You can tell that this is the case if a device user receives an error message that says "Couldn't map device record with a user" after they sign in to Company Portal.
144-
- Windows supports major.minor.build.rev for Windows 10 and Windows 11 only.
144+
145+
> [!TIP]
146+
> The min/max range isn't applicable to Apple devices that enroll with the Device Enrollment Program, Apple School Manager, or the Apple Configurator app. Although Intune doesn't block ADE enrollments that use Company Portal to authenticate, not meeting OS requirements impacts registration because devices can't create the Azure AD device record used to evaluate Conditional Access policies. You can tell that this is the case if a device user receives an error message that says "Couldn't map device record with a user" after they sign in to Company Portal.
147+
145148
- **Personally-owned**: Select **Allow** to permit devices to enroll and operate as personal devices.
146149
- **Device manufacturer**: Enter a comma-separated list of the manufacturers that you want to block.
147150

0 commit comments

Comments
 (0)