Device type restrictions

When configuring device type restrictions, you choose prerequisites for devices connecting to company data. You're able to restrict devices based on their platform or the platform configuration. The following are restriction options available to you:

• Platforms (allow or block):
  • Android
  • Android Enterprise
  • iOS/iPadOS
  • macOS
  • Windows Phone 8.1
  • Windows 8.1 and later
  • Windows 10 and later
• Platform configurations:
  • Minimum version
  • Maximum version
  • Allow/block personally owned devices

Let's go ahead and create restrictions:

1. To create a restriction, go to Azure | Device enrollment | Enrollment restrictions and click Create restriction.
2. Select Device type restriction for the restriction type:

1. Name and describe your restriction. Click Next:

1. Because we selected Device type restriction, we must now configure the platform settings.
2. To allow access for a specific platform type, just toggle the Allow/Block switch. You can also configure the minimum and maximum allowed versions of each with the exception of macOS. The far-right toggle allows you to block personally owned devices of each platform type as well:

Once the platform settings are configured, you click Next and assign the restriction to specific groups and confirm the restriction settings.

Now that we've seen the capabilities of Device type restrictions, let's look at the device limit restrictions.