> ## Content Index
> Fetch the complete content index at: https://www.myronhelgering.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Quick Guide: How to disable personal device enrollments in Microsoft Intune
- URL: https://www.myronhelgering.com/quick-guide-how-to-disable-personal-device-enrollments-in-microsoft-intune/
- Published: 2024-01-27T17:38:11.000Z
- Updated: 2026-10-17T16:09:48.000Z
- Author: Myron Helgering
- Tags: Quick Guides, Microsoft Intune

Many times, I've seen companies actively managing personal devices in Microsoft Intune, sometimes intentionally, but most of the time, accidentally without the user's knowledge. My personal stance on the subject is simple: **don't fully manage a device that isn't yours**.

To solve this issue, I wrote a quick and easy guide for you on how to disable personal device enrollments by configuring enrollment restrictions in Microsoft Intune.

The guide will cover the following sections:

- [Configure Enrollment Restrictions policy](#configure-enrollment-restrictions-policy)
- [User experience](#user-experience)
- [Important: How to corporately enroll a device](#important-how-to-corporately-enroll-a-device)

## Configure Enrollment Restrictions policy

To disable personal device enrollment in Microsoft Intune, please follow the following steps;

1. Navigate to the [Microsoft Intune admin center](https://intune.microsoft.com/) and go to the **"Devices"** page.
2. Next, go to the **"Enrollment device platform restrictions"** policy page and click on the **"All Users"** policy to change the global policy or create a new one to disable device enrollments for a specific user group.

![Navigating to the enrollment restrictions policies](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/navigating-to-the-enrollment-restrictions-policies.png)

1. Lastly, select the **"Block"** setting for all device platforms or individual platforms if preferred and **"Save"** the policy.

![Disable personal enrollments](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/disable-personal-enrollments.png)

Keep in mind that personally-owned devices that were previously enrolled will remain enrolled until you **remove** or **retire** them from the Microsoft Intune device overview.

![Remove or retire device in Microsoft Intune](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/remove-or-retire-device-in-microsoft-intune.png)

Congratulations, you have successfully prevented users from enrolling personal devices in Microsoft Intune.

## User experience

If users try to enroll their personal device (accidentally or intentionally), they will receive an error message, like the Windows error message below.

![Error personal device enrollment](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/errorenrollment.png)

## Important: How to corporately enroll a device

After configuring the enrollment device platform restrictions policy, administrators must use an authorized method to corporately enroll a new device in Microsoft Intune.

For Windows devices, corporate device enrollments are available through;

- [Windows Autopilot](https://learn.microsoft.com/en-us/autopilot/enrollment-autopilot)
- [Group Policy](https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy) or [Configuration Manager](https://learn.microsoft.com/en-us/mem/configmgr/comanage/quickstart-paths#bkmk%5Fpath1)
- [Bulk Provisioning Package](https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll)
- An administrator using a [Device Enrollment Manager Account](https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll)

Secondly, for MacOS or iOS/iPadOS devices, corporate device enrollments are available through;

- [Automated Device Enrollment](https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-program-enroll-ios), [Apple School Manager](https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-school-manager-set-up-ios), or [Apple Configurator](https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-configurator-enroll-ios) (iOS/iPadOS only)
- Devices that are [registered with a serial number](https://learn.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add)

Lastly, for Android devices, corporate device enrollments are available through;

- [Managed Google Play](https://learn.microsoft.com/en-us/mem/intune/enrollment/connect-intune-android-enterprise)
- [Google Zero Touch](https://learn.microsoft.com/en-us/mem/intune/enrollment/android-dedicated-devices-fully-managed-enroll#enroll-by-using-google-zero-touch) or [Samsung Knox Mobile](https://learn.microsoft.com/en-us/mem/intune/enrollment/android-samsung-knox-mobile-enroll)
- Devices that are [registered with a serial number](https://learn.microsoft.com/en-us/mem/intune/enrollment/corporate-identifiers-add)

If you found this post informative or have any questions, please tell me in the comment section.

# Quick Guide: How to disable personal device enrollments in Microsoft Intune