Microsoft Technical Takeoff: Windows and Microsoft Intune
Oct 24 2022 07:00 AM - Oct 27 2022 12:00 PM (PDT)

Intune AzureAD auto MDM enrollment blocked by also allowing MAM?


Setting up Intune AutoPilot from here:


But when I look at the docs for auto-enrollment there is this warning:



  • If both MAM user scope and automatic MDM enrollment (MDM user scope) are enabled for a group, only MAM is enabled. Only MAM is added for users in that group when they workplace join personal device. Devices are not automatically MDM enrolled.



So is it possible to have auto-enrolled MDM through AzureAD/Intune with Auto-Pilot while also having automatic MAM for non-windows devices?




It almost seems as if the AzureAD MAM page has bad wording - 

"MAM User Scope" makes sense - but MDM scope should be an OR for "Device/User/Device+User"



Note: This is all for url:


(I didn't copy/paste so I might have missed something)





1 Reply
best response confirmed by Neil Goldstein (Contributor)



That MAM settigns is MAM for Windows - and have nothing to do with MAM for non-windows :)

The MAM settings in the documentaion is for MAM for Windows with out enrollment - hope it makes sense.


Kind Regards

Per Larsen

Enterprise Mobility MVP