Enrolling Devices with Microsoft Intune Flashcards

Which enrollment method allows employees to enroll their personal Android devices while keeping personal and work data separate?

Answer: Android Enterprise personally-owned work profile

Android Enterprise personally-owned work profile enrollment creates a separate encrypted work container on personal devices, keeping corporate and personal data isolated.

What tool can be used to extract and upload Windows hardware hashes to Autopilot in bulk?

Answer: Get-WindowsAutoPilotInfo PowerShell script

The Get-WindowsAutoPilotInfo PowerShell script captures hardware hash information from devices and can upload it directly to Windows Autopilot.

An administrator wants to prevent users from enrolling more than 3 devices into Intune. Where is this configured?

Answer: Enrollment device limit restriction

The device limit enrollment restriction in Intune controls the maximum number of devices a single user can enroll.

Which Intune enrollment type is used for company-owned iOS devices that need to be enrolled without user interaction using Apple's DEP/ADE?

Answer: Automated Device Enrollment (ADE)

Automated Device Enrollment (formerly DEP) allows organizations to automatically enroll corporate-owned iOS devices into Intune without user interaction through Apple Business Manager.

A device enrolled via Windows Autopilot self-deploying mode fails during enrollment. What is the most common cause?

Answer: TPM 2.0 is not present or not attesting properly

Self-deploying mode requires TPM 2.0 attestation for device authentication; if TPM is absent or not functioning correctly, enrollment will fail.

What is the Enrollment Status Page (ESP) used for in Windows Autopilot?

Answer: Blocking device use until required apps and policies are applied

The Enrollment Status Page blocks the user from accessing the desktop until all required applications and policies assigned in Intune have been successfully applied.