You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: memdocs/intune/enrollment/device-enrollment-manager-enroll.md
+9-14Lines changed: 9 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,8 +33,7 @@ ms.collection:
33
33
34
34
# Add device enrollment managers
35
35
36
-
A device enrollment manager (DEM) is a non-administrator user who can enroll devices in Intune. Device enrollment managers are useful to have when you need to enroll and prepare a lot of devices for distribution. People signed in to a DEM account can enroll and manage up to 1,000 devices, while a standard non-admin account can only enroll 15.
37
-
36
+
A device enrollment manager (DEM) is a non-administrator user who can enroll devices in Intune. Device enrollment managers are useful to have when you need to enroll and prepare many devices for distribution. People signed in to a DEM account can enroll and manage up to 1,000 devices, while a standard non-admin account can only enroll 15.
38
37
39
38
A DEM account requires an Intune user or device license, and an associated Azure AD user. Global Administrators and Intune Service Administrators can add and manage device enrollment managers in the Microsoft Endpoint Manager admin center.
40
39
@@ -60,26 +59,25 @@ These Azure AD roles can manage device enrollment managers:
60
59
* Global Administrator
61
60
* Intune Service Administrator role in Azure AD
62
61
63
-
They can add and delete device enrollmnet managers, and view all DEM users in the Microsoft Endpoint Manager admin center. You can assign the DEM read-only permission to users who don't meet the role requirements. It lets them see the DEM users they've created.
62
+
They can add and delete device enrollment managers, and view all DEM users in the Microsoft Endpoint Manager admin center.
64
63
65
64
## Limitations
66
65
67
-
The device enrollment manager account can't be used with all features in Microsoft Intune and has some limitations when used with others. This section describes the limitations you could encounter while sigmed in to a DEM account.
66
+
The device enrollment manager account can't be used with all features in Microsoft Intune and has some limitations when used with others. This section describes the limitations you could encounter while setting up devices from a DEM account.
68
67
69
68
### Android Enterprise
70
69
You can enroll up to 10 personally owned devices with work profiles.
71
70
72
71
The following types of Android Enterprise devices can't be set up via DEM:
73
72
74
-
* Corporate-owned with a work profile
75
-
* Fully managed
73
+
* Corporate-owned with a work profile
74
+
* Fully managed
76
75
77
76
### Apple Automated Device Enrollment
78
-
DEM is not compatible with Apple Automated Device Enrollment (ADE).
77
+
DEM isn't compatible with Apple Automated Device Enrollment (ADE).
79
78
80
79
### Apple volume purchased apps
81
-
* You can't use apps purchased through Apple VPP with Apple VPP user licenses, because of per-user Apple ID requirements for app management.
82
-
* Devices can install VPP apps if they have Apple VPP device licenses.
80
+
DEM-enrolled devices can install VPP apps if they have Apple VPP device licenses. You can't use apps purchased through Apple VPP with Apple VPP user licenses, because of per-user Apple ID requirements for app management.
83
81
84
82
### Azure AD
85
83
Applying an Azure AD device restriction to a DEM account will prevent you from reaching the 1,000 device limit that the DEM account can enroll.
@@ -94,13 +92,10 @@ Conditional access is only supported with DEM on devices running:
94
92
DEM enrolls Windows 10/11 devices in shared device mode, so device limit restrictions won't work on them. Instead, you can configure a hard limit for these devices in the Azure AD admin center. For more information, see [Manage device identities by using the Azure portal](/azure/active-directory/devices/device-management-azure-portal#configure-device-settings).
95
93
96
94
### Intune Company Portal
97
-
98
-
* Device users can't wipe DEM-enrolled devices from Company Portal. You have to sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) to wipe these devices.
99
-
* Only the local device appears in the Company Portal app or Company Portal website.
95
+
Only the local device appears in the Company Portal app or Company Portal website. Device users can't wipe DEM-enrolled devices from Company Portal. You have to sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) to wipe these devices.
100
96
101
97
### Number of accounts
102
-
There's a limit of 150 Device Enrollment Manager (DEM) accounts in Microsoft Intune.
103
-
98
+
There's a limit of 150 DEM accounts in Microsoft Intune.
0 commit comments