When adding corporate identifiers by using a .csv file the IMEI numbers can't be 15 digits long. Only 14.

Adding them manually works.

Right now there is no way to determine what group(s) the device belongs to in the Mobile Device inventory Report. So much for organizational reporting.

We are currently running a MDM by another vendor and are migrating Intune. On our current MDM we can take a CSV and fill it full of custom columns. Then we query that list to have it automatically assign to groups, configure device names, and run actions against.
Having this greatly reduces the amount of ongoing maintenance that is required by the system as most devices are pre-configured and assigned whatever they require. It would be great if this was built into the “Corporate device identifier” function.

Now that Intune can assign a default enrollment profile (https://docs.microsoft.com/en-us/intune/device-enrollment-program-enroll-ios#assign-a-default-profile), we need a way of:

a) creating different enrollment profiles based on platform type

b) assigning these profiles (or not) to those specific platforms as default

The idea is a layered approach to policies and user access. We have a lot of devices that are shared between users, so we want to have a generic account for them to use on the device. In some occasions, a person will need to sign in with their credentials to access additional applications or policies. Once they are done, they need to sign out and have it go back to that generic login.

It will be a great feature to get more information about non-compliant devices.
Therefore I think Microsoft needs to improve the Intune portal reporting to indicate exactly why devices are being marked as non-compliant.
This will also be helpful for "actions for noncompliance" by sending an email to the users or admins, which is possible on other mdm solutions.

Currently there exists no built-in automated cleanup of corporate data from registered apps and/or devices when a user is terminated and their AAD user object is disabled.

It is possible to leverage the Graph API via Powershell scripting to automate some of this.

It would be great if it were possible to enable built in automation of this process. Ideally the call to wipe corporate data from apps and devices along with removing the devices from Intune would take place once the account disable has taken place.

We know that we can have customized Terms & Conditions, and we know that we can assign these by user groups. What we want is to query the language used on the device and automatically select the appropriate, pre-loaded language. This would overcome any risk of the wrong language to be displayed if IT doesn't properly assign the right T's & C's based on the language used.

Actually Users can delete thier device from company portal.
i think that a dedicated policy are needed.

Have s seperate page/container for Lost Devices,
eg. I have a iPad in lost mode in the same location as other devices...
would rather have that device some where else and able to locate it quickly in that container/page

Most settings only have the option to either Enable or leave Not Configured. When a profile is removed, the settings remain in place on Windows systems. Applying a profile that sets these same settings to Not Configured does nothing. If we could instead set them to Disabled we could then overwrite the settings that were left behind like we can currently do in Group policy.

Currently the only supported workaround I can find is to retire then re-enroll the device. This is not a feasible solution.

I can deploy user certificate by using Intune, SCCM, my CA and NDES server, but my security rules determinates that all user certificates must be approved by security team. Pleas add such funkcionality.

Mail Alert Generation when single device or multiple devices are wiped by any Intune administrator

On the Azure Intune Portal, where you see the status of assigned policies (Device Configuration > Assignment Status), the columns are not clickable. As a result, you can't sort the profiles on this blade at all. If you go to the Profiles blade, the profiles are sortable there. This isn't a huge issue, but it does make the console feel inconsistent.

The policy sets are a very cool feature but do not support some object types which would be really helpful:
- PowerShell Scripts
- Win32 and MSI Applications
- Security Baselines

Ability to allow only specific Android manufacturers devices for full enrollment.

When changing a compliance policy a user has 60 minutes to become compliant. It would nice to be able to set this time instead.