Add a policy to prevent device unenrollment from Company portal
Companies provide devices to their employees and generally wants to make sure that these devices will always remain managed through Intune. It could be interesting to have a policy that prevent users to unenroll a device identified as a company device from the Intune company portal.
Jean-Baptiste Frossard
shared this idea
I can confirm that we have this on our plan for early in 2020/ Thanks for your patience!
83 comments
-
Pratik Dave
commented
Apple DEP integration has capabilities which stops device unenrollment for iOS Corp devices ! Something out the of box would be useful too, may be altering when user trigger removal of mgmt would be useful for admins
-
Anthony Zmoda
commented
That wouldn't work for us. We offer device wide VPN to both BYOD and Corporate owned Intune enrolled devices. We can't containerize device wide VPN so we require all of our end users to wipe their devices when leaving the mobility program. If we could toggle the "remove device" icon from within the Company Portal app, then that would reduce the likelihood of a device leaving Intune enrollment without having the factory reset performed.
-
James Read
commented
Disabling removing devices by ownership is exactly what we need.
-
stillajl
commented
Yes, that would work based on corporate or personal owned devices.
-
Rama Shankar
commented
disabling this option on corporate devices seems more appropriate whoever on personal also it would be best if the app from personal device can be removed after admins approval ( when user tries to remove it, admin will get notified and can approve or deny )
-
Kevin Pearce
commented
Yes, this would do exactly what we need.
-
Brad Dunn
commented
Hi Cathy, disabling based on ownership is exactly what we need.
-
Justin W
commented
Yes, if all managed devices are corporate devices, only a domain admin should be able to remove them from Intune
-
Anonymous
commented
This a great idea and would be very useful. The idea of corporate vs personal is spot on!
-
Marcus
commented
There's still no such feature for Android device. Looking forward to have such feature, please add this feature.
-
Anonymous
commented
Hi,
Can you please add this functionality!! -
Rishikesh Negi
commented
Yes we need this option.
-
Rama Shankar
commented
There should be a policy to prevent removing device from company portal app and to prevent uninstall of the app from enterprise device.
-
Pratik Dave
commented
Apple DEP is way to go, users cannot remove profile on supervised devices.
-
Anthony Zmoda
commented
I'd like this as well! Seems like it is implemented for Windows 10 devices.
-
Allen Wheeldon
commented
it seems im not the only admin wanting to prevent users from removing the Company Portal from, android devices. Our users abuse this and it causes problems. I would think Msoft would take this seriously as a need for enterprise customers with 100's of devices in play.
-
Dan
commented
Or is there a way to restrict end users changing the Google Play account ?
-
Dan
commented
If a device has been flagged as corporate ( Corporate device identifiers ) is there a way we can prevent end users from uninstalling the Company Portal app ( specifically Android ) ?
-
Dan
commented
Sorry Berry - so is it a No in regards to restricting Android devices from uninstalling the Company Portal app ?
-
Berry Schreuder
commented
Not just from the Company Portal, also from within the Windows 10 accounts settings applet.