Intune enrolment options

Windows

• Windows Autopilot: corporate devices from the box. User-driven, self-deploying (kiosks and shared devices) or pre-provisioned (IT or partner does the device phase first).
• Entra join with automatic enrolment: joining in setup or Settings enrols in Intune when the MDM user scope includes the user.
• Hybrid joined: enrol with Group Policy, or co-manage with Configuration Manager.
• Personal devices: Entra registration, with app protection or browser-only access rather than full management.

iPhone and iPad

• Automated Device Enrollment through Apple Business Manager: corporate, supervised, can't be removed by the user.
• Apple Configurator: for devices bought outside Apple Business Manager.
• Device enrolment with Company Portal or web-based enrolment: corporate or personal, not supervised.
• Account-driven User Enrolment: personal devices, with work data kept separate.

Android Enterprise

• Personally owned work profile: BYOD. Work apps in a separate profile.
• Corporate-owned work profile: company device with allowed personal use.
• Fully managed: company device for work only.
• Dedicated: kiosks, scanners and shared single-purpose devices.
• AOSP: devices without Google Mobile Services, such as some headsets.

Corporate devices enrol with a QR code, Zero-touch or Samsung Knox Mobile Enrollment.

macOS and Linux

• macOS Automated Device Enrollment: corporate Macs through Apple Business Manager.
• macOS with Company Portal: user-approved enrolment for other Macs.
• Linux: supported Ubuntu and Red Hat desktops enrol with the Intune app.