Microsoft 365 Endpoint AdministratorManage identity and compliance (10-15%)Hard
A global manufacturing company needs to manage mobile devices (iOS and Android) for its frontline workers. These devices are corporate-owned and will be used exclusively for work-related tasks, with minimal user interaction required for setup. The company wants to ensure strict control over app installations and device settings. Which Intune enrollment method would be most suitable for these devices?
- AAutomated Device Enrollment (ADE) for iOS or Android Enterprise dedicated devices
- BDevice enrollment manager (DEM)
- CUser enrollment
- DBring Your Own Device (BYOD)
Show answer & explanationAnswer & explanation
Correct answer: A. Automated Device Enrollment (ADE) for iOS or Android Enterprise dedicated devices
For corporate-owned devices used for specific work tasks with strict control and minimal user interaction, Automated Device Enrollment (ADE) for iOS/iPadOS or Android Enterprise dedicated devices (formerly Kiosk/COSU) are the most suitable methods. These provide powerful management capabilities and simplify initial setup.
Why the other options are wrong
- B. DEM accounts are for enrolling a large number of devices with a single user account, but it doesn't provide the zero-touch setup or dedicated device management capabilities required.
- C. User enrollment is primarily for personal devices where users want to keep corporate and personal data separate, offering less stringent control.
- D. BYOD is for personal devices and offers the least control, which contradicts the 'corporate-owned' and 'strict control' requirements.
Corporate-Owned, Single-Purpose (COSU) Device Enrollment
Enrollment methods for corporate-owned mobile devices designed for specific functions (e.g., kiosk, digital signage, frontline worker tools) that offer high levels of management and often zero-touch deployment.
- Examples: Apple Automated Device Enrollment (ADE), Android Enterprise Dedicated Devices.
- Provides granular control over device settings, apps, and restrictions.
- Simplifies initial setup for end-users, often requiring no user interaction.
Memory trick: Enrollment's path: personal, bulk, or corporate's dedicated wrath.