List

Microsofts Senior Program Manager, Matt Shadbolt, recently confirmed that the company is working to more granular separate what devices and hardware vendors that users may enroll to your tenant.

Not surprisingly, the recent attention to the still ongoing situation with Huawei have given this (lacking) feature a lot of focus. Although it is not a out-of-box solution, nor a fail-proof one, there is a workaround to prevent your users to enroll devices from one or more hardware vendors and/or models.

Although you can’t block the device from enrolling, you can make it useless for the user from a corporate point of view

Azure Active Directory dynamic group

Sign in to the Azure Portal and browse;
Azure Active Directory –> Groups. Then, click “+ New group”
While creating the new group, ensure that you make this a dynamic group and enter the following values;
(device.deviceOSType -contains “OperatingSystem”) -and (device.deviceManufacturer -eq “HWVendor”)
eg; (device.deviceOSType -contains “Android”) -and (device.deviceManufacturer -eq “Huawei”)

Screenshot – Solaat.no

Then, the “impossible”

The trick is to use compliance policies to limit and/or restrict access to corporate resources by giving them an impossible compliance policy.
For this, navigate to;
Intune –> Device compliance –> Policies –> Create policy
Then, create a compliance policy with a “impossible” value, for instance, minimum version of Android to 10017 (as Android 9 is current, this should stay current for quite some time…)

Screenshot – Solaat.no

Now, make sure that you assign this device compliance policy to the newly created (or existing) AAD group.

Of course, as Apple is the only vendor of iOS devices, this would be an effective way to keep outdated Apple devices from accessing corporate data as devices gradually falls out of scope for newer versions of iOS. For instance, blocking iPhone 5s’ from accessing by setting the value to ’13’ later this year, would make an impossible policy for devices with iOS 12.x as their end-station.

Bear in mind however, limiting outdated devices will force users to update to the latest versions of the operating system to gain access. Not necessarily a bad thing, but something you outta keep in mind

If you prefer, you could browse the Microsoft Graph for the specific operating system, OS version or other attributes other than hardware vendor.

  • Alex

Leave a Reply

  Posts

1 3 4 5 6
February 11th, 2015

NIC Special: Binary converter

Every geek knows that computers runs on binary, not text.
This is a round up on how you decipher decimals, hex and binary to ASCII.

January 28th, 2015

It’s here! The Microsoft Ignite Session Catalog

The Microsoft Ignite Session Catalog is public! Be sure to take a look at the hundreds of sessions at one of the biggest enterprise technology event of the year

January 1st, 2015

Congratulations 2015 Microsoft MVP!

Congratulations, You’re an Surface ITpro MVP!

January 1st, 2015

NIC2015 – The agenda is out

The impressive agenda for NIC 4th edition is publicly announced, and it is risen above any doubts whats the IT-pros “must-attend-to”-conference in 2015

November 26th, 2014

Ben Armstrong to NIC

With TechDays Sweden in the rear-view Mirror, I’m excited to know another world-leading speaker, Ben Armstrong, Is attending in Oslo.
Ben Armstrong is a Principle Program Manager at Microsoft who works on the Hyper-V development team.

October 7th, 2014

Mark Minasi – confirmed keynote speaker for NIC 4th edition

One of the the industry’s best-selling author, popular technology columnist, commentator, keynote speaker, and IT consultant is confirmed as keynote for the Nordic Infrastructure Conference.

September 25th, 2014

Speaking at TechDays Stockholm – Shaping the future with Surface

During Stockholm TechDays conference in November, Magnus Haglund and I will be speaking about the Surface family

September 18th, 2014

Get ready for NIC; The Nordic region’s largest IT Conference

Nordic Infrastructure Conference (NIC) was held for the first time in 2012 as a major event on both national and international scale. In february 2015, NIC is ready for its 4th Edition – Northern Europe’s definitive event for IT-pros.

September 2nd, 2014

Students, don’t miss out on OneNote

As students you have the benefit of many special treats as vendors and providers offers a special treat for these particular customers. The Office 365 University is one you definately don’t want to miss out

August 26th, 2014

Spotify now free on Windows Phone

As of 26th of august, Spotify becomes a free music service for all Windows Phone 8 and 8.1 users