Understand Intune and Microsoft Entra device limit restrictions - Microsoft Intune (2024)

Applies to

• Android
• iOS
• macOS
• Windows 10
• Windows 11

There are two ways to limit the number of devices an employee or student can use for work or school. You can:

• Configure device limit restrictions in the Microsoft Intune admin center.
• Configure a device limit in the Microsoft Entra admin center.

This article provides an overview of each limitation, and describes the device conditions and provisioning scenarios that support them.

Intune device limit restrictions

Configure Intune device limit restrictions to limit the number of devices a user can enroll in Microsoft Intune. You can allow a user to enroll up to 15 devices. To create a device limit restriction, sign in to the Microsoft Intune admin center and go to Devices > Enrollment. For more information, see Create a device limit restriction.

Intune device limit restrictions don't apply to devices enrolled via:

• Android device administrator + device enrollment manager
• Android Enterprise dedicated device
• Co-management with Configuration Manager
• Automatic enrollment + group policy
• Automatic enrollment + device enrollment manager
• Automatic enrollment + bulk device enrollment
• Windows Autopilot

Devices enrolled via these methods are enrolled automatically or by an Intune admin, not by an employee or student, and are considered shared devices. Instead, you can apply the Microsoft Entra limit, where supported.

Microsoft Entra device limit

Configure the maximum number of devices per user in Microsoft Entra to limit the number of devices that can join or register with Microsoft Entra. To access this setting:

1. Sign in to the Microsoft Entra admin center.
2. Go to Identity > Devices > Device settings.

The limit applies to devices that are Microsoft Entra joined or Microsoft Entra registered, with some exceptions. It isn't applicable to Microsoft Entra hybrid joined devices, and devices enrolled via:

• Android Enterprise dedicated device
• Windows automatic enrollment + bulk device enrollment
• Windows automatic enrollment + group policy

For more information about configuring these setting in Microsoft Entra ID, see Configure device settings.

Applicable scenarios

Use the following table to determine the type of limitations you can apply to devices.

Android and iOS devices

iOS or Android devices example 1

• The Microsoft Entra Maximum number of devices per user setting is set to 3.
• The Intune Device limit setting is set to 5.

Outcome: You can enroll up to 3 devices, because the Microsoft Entra ID limits users to a maximum of 3 devices. If you try to enroll more than three devices in Intune, enrollment fails because the fourth device is blocked from registering in Microsoft Entra ID.

iOS or Android devices example 2

• The Microsoft Entra Maximum number of devices per user setting is set to 20.
• The Intune Device limit setting is set to 2.

Outcome: You can successfully register and enroll two devices. Intune enrollment will be blocked for any additional devices. The Microsoft Entra limit only applies to Apple automated device enrollment when devices are configured with user affinity.

Windows devices

Windows 10/11 example 1

• The Microsoft Entra Maximum number of devices per user setting is set to 5.
• The Intune Device limit setting is set to 3.
• The devices are Microsoft Entra hybrid joined and enrolled automatically (GPO configured).

Outcome: Because the enrollment is provisioned by GPO, the Microsoft Entra device limit doesn't apply. The Intune device limit restriction also doesn't apply.

Windows 10/11 example 2

• The Microsoft Entra Maximum number of devices per user setting is set to 5.
• The Intune Device limit setting is set to 2.
• The devices are local domain joined, and enrolled in the Settings app.

Outcome: You can only enroll two devices before they're blocked. You can register up to five devices.

Next steps

• Create a device limit restriction in Azure.
• Learn more about registration and domain joined.