Ensurethat corporate devices are marked as corporate-owned as soon as they enroll by adding their corporate identifiers ahead of time in the Microsoft Intune admin center. The benefit of managing corporate devices is that they enable more device management capabilities than personal devices. For example, Microsoft Intune can collect full phone number and app inventory from a corporate device, but can only collect partial phone number and app inventory for personal devices. To add corporate identifiers to Microsoft Intune, you can upload a file of corporate identifiers in the admin center or enter each identifier separately.
You can also create a custom Intune role for people managing corporate identifiers and assign corporate device identifier permissions. For more information about built-in roles and custom roles, see RBAC with Microsoft Intune.
Before you begin, determine the type of corporate identifiers you want to add. You can add one type of corporate identifier per CSV file. Devices that enroll without corporate identifiers are marked as personal. Intune supports the following identifiers:
Remove all periods, if applicable, from the serial number before you add it to the file. You can add device details after each corporate identifier. Details are limited to 128 characters and are for administrative use only. They don't appear on the device.
Android and iOS/iPadOS devices can have multiple IMEI numbers. Intune reads and records one IMEI per enrolled device. If you import an IMEI that's different from the one already in Intune, Intune will mark the device as personal. If you import multiple IMEI numbers for the same device, the identifiers that haven't been inventoried appear with an unknown enrollment status.
Android serial numbers aren't guaranteed to be unique or present. Check with your device supplier to find out if the serial number is a reliable device ID. Serial numbers reported by the device to Intune might not match the ID shown on the device in Android settings or Android device information. Verify the type of serial number reported by the device manufacturer.
After you add Windows corporate identifiers, Intune marks devices that match all three identifiers as corporate-owned, and marks all other enrolling devices in your tenant as personal. This means that anything you exclude from the Windows corporate identifiers is marked personal. To change the ownership type after enrollment, you have to manually adjust it in the admin center.
Windows corporate identifiers can only change ownership type if someone adds them to Microsoft Intune. If you don't have corporate identifiers for Windows in Intune, or if you remove them, devices that are Microsoft Entra domain joined are marked as corporate-owned. This includes devices enrolled via automatic MDM enrollment with:
A pop-up window prompting you to review duplicate identifiers appears if the CSV file contains corporate identifiers that are already in Intune but have different device details. To resolve the duplicates, select the identifiers that you want to overwrite in Intune. Then select Ok to add the identifiers. Intune only compares the first duplicate of each identifier.
A pop-up window prompting you to review duplicate identifiers appears if your entries contain corporate identifiers that are already in Intune but have different device details. To resolve the duplicates, select the identifiers that you want to overwrite. Then select Ok to add the identifiers. Intune only compares the first duplicate of each identifier.
When you change a device's ownership type from corporate to personal, Intune deletes all app information previously collected from that device within seven days. If applicable, Intune also deletes the phone number on record. Intune still collects the inventory of apps installed by the IT admin on the device, and a partial phone number.
When you change the ownership of an iOS/iPad or Android device from personal to corporate, a push notification is sent through the Company Portal app to inform the device user of the change. To configure push notifications, go to Tenant administration > Customization. For more information, see Company Portal - Configuration.
To confirm the reason for an enrollment failure, go to Devices > Enrollment failures and look in the table under Failure reason. In this case, the reason is Enrollment restriction not met. Select the reason to open failure details.
Windows corporate device identifiers are only supported for devices running Windows 11 version 22H2 and later. Earlier versions can't render the model and manufacturer property. As a result, the property appears in the admin center as Unknown. We're working on expanding corporate identifer support to devices running earlier versions of Windows.
You can upload up to 10 CSV files for Windows corporate identifiers in the admin center. If you need to upload more data, we recommend using PowerShell or the Microsoft Intune Graph API to add corporate identifiers.
How to uniquely identify an iOS device? I need the unique identifier for the purpose of logging to achieve tracing back the device based on the data sent. So i need to programatically generate a code that helps me know the exact device which generated the log. Thanks in advance.
Hi Thanks for the reply. From the links WWDC videos, I could figure that we have 3 identifiers, provided by Apple viz UUID, VendorID and Advertising ID. After capturing these identifiers and logging them, individually, these identifiers don't solve the issue I am facing regarding i.e., using the identifying to back trace the device, as these identifiers can change. UUID -> changes when the application relaunches. VendorID -> changes when user deletes and reinstalls the application. Can you help me think for a solution where I can either extract the MAC Address or IMEI number(which seems like a non feasible option) or use a combination of these identifiers to achieve the objective i.e. to uniquely identify the device? Thanks in advance.
I'm working on app that has the same requirements, a device unique ID, to fingerprinting the device for the purpose (in our case) of establishing a relation between a specific instance of our app and the device were it's running. We have been looking at apple MDM protocol as solution, given that I've seen that using MDM commands we can query the device and then push a data dicionary containing the information to the device that the app que also access. We are also interested in the capability for example to remote wipe the app and data from the device in case of stollen of lost device, etc.
MDM allows you to get lots of unique information about the device via the MDM protocol itself (including the UDID, the serial number and the IMEI). If you need to correlate that to request made by your app, use MDM to push a unique ID to your app via managed app preferences and then have your app include that unique ID in its requests.
this generate an unique identifier stored into the NSUserDefault to be reused whenever the application need it - This identifier will unique related to the application installs not to the device, but can be used for example to take trace about the number devices subscribed the APN service etc...
You have to be careful, especially if you use the increment by 1 routines, that if your app is deleted and reloaded on the iDevice, that you won't have your saved default number anymore. It will start over from the beginning. If you're storing user's scores, you might want to save their highest number too. Better to check the time routines for seconds (or milliseconds) after a certain date. The GUID mentioned above is good too, if you need that kind of uniqueness.
iOS runs on various different models of devices. This page is used to give an overview of the different model numbers (or "M" numbers) used by devices. The model number of your device is located in the Settings app on the "General -> About" screen under "Model".
The model number of a device begins with a variable first letter representing the source of the device (replacement, engraved, etc.; see below). This is followed by four characters between either "A" and "Z" or "0" and "9" (most commonly only digits). Afterwards is either one or two characters representing the "region" of the device's origin. Depending on the software displaying the string, there may be a slash ("/") followed by a character.
Starting in 2021, Apple Bluetooth devices ceased to have descriptive identifier strings such as AirPodsPro1,1, and instead switched to identifiers following the format Device1,xxxx. The four or five digit number is the Bluetooth product identifier in decimal. This may have been implemented to prevent the product name from leaking before release.
This can be found on a Mac through the Bluetooth section of System Report. For example, the product identifier of AirPods Pro 2 is 0x2014. Converted from hex to decimal, this is 8212. Hence, the device identifier is Device1,8212.
To make searching this page easier, the first letter is always "M" and the "region" portion and everything after is removed (leaving us with the first five characters of the string). For example, let's say our model number is "MC922LL/A". The first letter is already "M", so we leave it alone. Next, we remove the "region" portion and everything after (the "LL/A" at the end) leaving us with "MC922". A "find-in-page" reveals this is a black 16 GiB iPhone 4S.
This article was co-authored by wikiHow staff writer, Rain Kengly. Rain Kengly is a wikiHow Technology Writer. As a storytelling enthusiast with a penchant for technology, they hope to create long-lasting connections with readers from all around the globe. Rain graduated from San Francisco State University with a BA in Cinema.
This article has been fact-checked, ensuring the accuracy of any cited facts and confirming the authority of its sources.
This article has been viewed 381,461 times.
Learn more...
3a8082e126