After testing O365 MDM, we removed all policies, devices and users from the MDM group that was created for testing. However, 6 months later, the test user is still being prompted to enroll in MDM when logging into OneDrive for Business app on any mobile device. I opened a support ticket and they put the user back into the MDM group and put the group into the global MDM policies exception list. That stopped the alerts to the user to enroll but said that you cannot remove a user from O365 MDM once they have been enrolled previously. So now i have to leave the user and the group configured forever but told that if we purcahse Intune that it would take over this configuration. Is there no way to remove the MDM configuration for this user without buying Intune?

I'm new to Intune and have confirmed with my 3rd party vendor the "feature" I'm about to describe is currently functioning properly. In my opinion this needs to change.

I don't know the behavior with Android yet, this was only just discovered with an iPhone device.

User gets new phone, backs up old phone, activates new phone, performs restore.

The management policy did not get loaded to the new device, but Outlook app was installed. User was only asked for credentials and was then allowed unmanaged access to corporate email.

I'm sure there are issues with how iPhones do restores at work here, but I think the issue should be addressed by Microsoft at a higher level.

If the company is licensed to use Intune for its MDM, there should be an option in Exchange to only allow access through a managed app. Turning on ActiveSync turns on access. I guess that is great for companies not using Intune, but for those that are, there should be greater control. The user should be forced to re-enroll the new device before the device is allowed to connect to corporate services.

Thank you

While enrolling devices for a customer we ran into an issue where the device would stop receiving commands from Intune.

After support looked into the logs the found a limit of 25 check-in's over a 1 hour timespan and suggested a uservoice to get support to increase this number.

Impact;
Intune Service has a throttling limits of maximum of 25 checks in an hour. This may include the check-ins initiated from install request of available apps + end user clicking checking compliance from the company portal + regular device check ins as per schedule.

Support can identify this issue by looking for "Device checkin throttled for - AccountID", "Rejecting session for Device" and "exceeded threshold of 25 in timespan of 01:00:00'"

Request;
I would like to have this increase to 50 check-in's and to identify the actual impact the current limit has on current tenants.

Justification;
With increased Intune functionality and the number of applications being deployed as on-demand I believe this limit will impact more devices.

There is no indicator on Intune to say this limit has been reached.

It now is possible, by using groups to automaticaly fill that group with devices that have a certain ownership (corporate/personal). It would be great if that step could be eliminated and that it will be possible to just have a pull down menu per app/configuration profile/update policy/etc. where we have the possibility to assign those settings to personal or corporate devices.

So as an addition to the possibility of adding group memberships or all users or devices.

For example:
Say that we have corporate and byo devices. We create 2 device configuration profiles. One for the corporate devices and one for the BYO devices.

In the current environment I need to create 2 dynamic groups with a rule to add corporate devices to one group and personal to the other group. Those groups can be assigned to their matching profiles.

The situation I hope for, create a policy and be able to assign that to all users and as an extra be able to select if that policy should be affective to only corporate, only personal or both types of devices.