Restrict enrollment based on Device Manufacturer
We know that there is an option to restrict the device based on the platform . But we need an option where the devices can be restricted based on the device manufacturer. There are cases in which particular manufacturer device types affected by malware. In that case we need to restrict those device from Intune until Malware issues are resolved.
David DeWolfe commented
The ability to restrict enrollment or remove a device from Intune based on device properties. OEM, Model, etc..