You have 100 devices that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD). You need to prevent users from joining their home computer to Azure AD. What should you do?

The correct answer is A. From the Device enrollment blade in the Intune admin center, modify the Enrollment restriction. Intune Enrollment Restrictions (Device enrollment blade > Enrollment restrictions) allow you to block personally owned devices from enrolling, effectively preventing users from adding home computers to management via Azure AD/Intune. This is more targeted than Option B (Azure…

Submitted by krish.m· Apr 18, 2026Manage and maintain devices

Question

Options

AFrom the Device enrollment blade in the Intune admin center, modify the Enrollment restriction
BFrom the Devices blade in the Azure Active Directory admin center, modify the Device settings.
CFrom the Device enrollment blade in the Intune admin center, modify the Device enrollment
DFrom the Mobility (MDM and MAM) blade in the Azure Active Directory admin center, modify the

How the community answered

(27 responses)

A
74% (20)
B
15% (4)
C
7% (2)
D
4% (1)

Explanation

Intune Enrollment Restrictions (Device enrollment blade > Enrollment restrictions) allow you to block personally owned devices from enrolling, effectively preventing users from adding home computers to management via Azure AD/Intune. This is more targeted than Option B (Azure AD Device Settings), which controls Azure AD join permissions globally and could inadvertently affect corporate device management. Option B's 'Maximum number of devices per user' or 'Users may join devices to Azure AD' settings are blunt instruments that don't distinguish between corporate and personal ownership the way Enrollment Restrictions do.

Topics

#Device enrollment restrictions#Azure AD device join#Intune enrollment#Enrollment policy

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice