Add a policy to prevent device unenrollment from Company portal
Companies provide devices to their employees and generally wants to make sure that these devices will always remain managed through Intune. It could be interesting to have a policy that prevent users to unenroll a device identified as a company device from the Intune company portal.
Jean-Baptiste Frossard
shared this idea
I can confirm that we have this on our plan for early in 2020/ Thanks for your patience!
87 comments
-
Anonymous
commented
This would work for us.
-
Owen Dickenson
commented
That would work for us; we would want to have corporate devices managed with no choice to our end users. Those connecting personal devices - that's up to them.
-
Thomas Wiedenhofer
commented
For me it would be nice if corporate devices are disabled from removing the device, personal owned devices could be free of choice. Thank you!
-
Noel Fairclough
commented
Yes -being able to un-enroll based on ownership status is perfect. Corporately owned = they can't un-enroll the device without approval, or without the admin doing it for them. Personally owned = they can do what they want. We can restrict access to corporate resources based on MAM policies -so if they don't want the managed app, they can't access resources. Simple. If they don't want to use their personal device, they can apply for a corporate device but then live by our rules.
-
Pratik Dave
commented
Apple DEP integration has capabilities which stops device unenrollment for iOS Corp devices ! Something out the of box would be useful too, may be altering when user trigger removal of mgmt would be useful for admins
-
Anthony Zmoda
commented
That wouldn't work for us. We offer device wide VPN to both BYOD and Corporate owned Intune enrolled devices. We can't containerize device wide VPN so we require all of our end users to wipe their devices when leaving the mobility program. If we could toggle the "remove device" icon from within the Company Portal app, then that would reduce the likelihood of a device leaving Intune enrollment without having the factory reset performed.
-
James Read
commented
Disabling removing devices by ownership is exactly what we need.
-
stillajl
commented
Yes, that would work based on corporate or personal owned devices.
-
Rama Shankar
commented
disabling this option on corporate devices seems more appropriate whoever on personal also it would be best if the app from personal device can be removed after admins approval ( when user tries to remove it, admin will get notified and can approve or deny )
-
Kevin Pearce
commented
Yes, this would do exactly what we need.
-
Brad Dunn
commented
Hi Cathy, disabling based on ownership is exactly what we need.
-
Justin W
commented
Yes, if all managed devices are corporate devices, only a domain admin should be able to remove them from Intune
-
Anonymous
commented
This a great idea and would be very useful. The idea of corporate vs personal is spot on!
-
Marcus
commented
There's still no such feature for Android device. Looking forward to have such feature, please add this feature.
-
Anonymous
commented
Hi,
Can you please add this functionality!! -
Rishikesh Negi
commented
Yes we need this option.
-
Rama Shankar
commented
There should be a policy to prevent removing device from company portal app and to prevent uninstall of the app from enterprise device.
-
Pratik Dave
commented
Apple DEP is way to go, users cannot remove profile on supervised devices.
-
Anthony Zmoda
commented
I'd like this as well! Seems like it is implemented for Windows 10 devices.
-
Allen Wheeldon
commented
it seems im not the only admin wanting to prevent users from removing the Company Portal from, android devices. Our users abuse this and it causes problems. I would think Msoft would take this seriously as a need for enterprise customers with 100's of devices in play.