To control whether users see enrollment prompts in Intune Company Portal, change the Device enrollment option in the tenant’s Company Portal customization settings. Choose Available, with prompts to surface enrollment proactively, Available, no prompts to keep enrollment available without prompts, or Unavailable to remove the Company Portal enrollment route. This setting controls the portal experience; use Intune’s separate platform and device limit restrictions to control which devices may enroll and how many a user may register.
Choose what users can do in Company Portal
In the Intune admin center, open the tenant’s Company Portal customization settings and locate Device enrollment. The setting determines whether and where Company Portal prompts users to enroll in mobile device management.
As an Amazon Associate I earn from qualifying purchases.
| Option | User experience | When to choose it |
|---|---|---|
| Available, with prompts | The default experience. Company Portal prompts users to enroll in all possible locations. | Choose this when you want enrollment surfaced proactively. |
| Available, no prompts | Enrollment checklist prompts and notifications are suppressed. Users can still enroll from their current device’s details or when an app requires enrollment. | Choose this when enrollment should remain possible without proactive prompting. |
| Unavailable | Users cannot enroll through this Company Portal experience, and apps that require enrollment are hidden. | Choose this when you do not want users to enroll through Company Portal. |
The choice changes the user-facing enrollment experience. In particular, hiding prompts does not prevent enrollment: Available, no prompts leaves the device-details and app-required routes available.
Check Company Portal version requirements
Microsoft lists minimum Company Portal versions for the documented behavior: iOS/iPadOS version 4.4 and Android version 5.0.5421.0. Microsoft ended support for Android Company Portal versions earlier than 5.0.5421.0 on October 1, 2025; older versions might lose registration status and be marked noncompliant.
#1 Best Overall
- Brilliant Display – Stunning 13.8" PixelSense touchscreen[1], with brilliant LCD display[2], unleashes luminous whites, deeper blacks and colors so richly saturated bringing vivid life into every frame – perfect for work, school, streaming and creative tasks.
- Power that lasts all day – With 20 hours of battery life[3], the new Surface Laptop powers through your entire day, so you can create, work and stream from morning to night without reaching for a charger.
- Work at the speed of your ideas – Built with the latest Qualcomm Snapdragon X2 Elite (12 Core) processors, Surface Laptop delivers fast, AI‑accelerated performance—making it the most powerful Surface laptop for everything from multitasking to demanding workloads.
- The ports you need – Charge on-the-go, transfer data fast, or create the ultimate desktop set up with two USB-C / USB4[4] ports.
- Built-in AI Companion – Work smarter, create freely, and communicate with confidence—Copilot[5] on Windows 11 is always there to help.
Know which enrollment paths are exceptions
Apple Automated Device Enrollment
The Device enrollment customization does not control iOS/iPadOS devices configured for Apple Automated Device Enrollment (ADE). Those devices enroll during out-of-box setup regardless of this option. When a user launches Company Portal, the app prompts them to sign in.
Samsung Knox Mobile Enrollment
The setting does apply to Android devices configured for Samsung Knox Mobile Enrollment. If Device enrollment is set to Unavailable, the device does not enroll during out-of-box setup.
Rank #2
- A PREMIUM PERFORMANCE LAPTOP — Ready for work, school, and creativity. Built for busy days, big projects, and nonstop multitasking. Run video calls, school and work apps, 20+ browser tabs, and AI tools at the same time without slowing down.
- WITH AI BUILT IN — With a dedicated AI chip (Qualcomm Snapdragon X2 Elite), this Copilot+ PC[5] on Windows 11 helps you work smarter and faster. Prompt, create, and automate with ease - ready for even your most demanding tasks.
- A 13.8" TOUCHSCREEN YOU'LL ACTUALLY USE — Sharp colors, real detail, smooth 120Hz scrolling on the PixelSense touchscreen[1] with LCD display[2]. Tap, scroll, or pinch to zoom - whichever feels right for streaming, editing photos, or daily work.
- 20 HOURS OF BATTERY (LEAVE THE CHARGER) — Up to 20 hours of video playback[3] on a single charge. Work from a coffee shop, take it to class/work, or binge an entire season on a long flight — it'll keep up.
- THE PORTS YOU NEED — Two USB-C / USB4[4] ports for fast charging, big file transfers, or hooking up to three 4K monitors when you want a full desktop. Wi-Fi 7 keeps you online and fast wherever you are.
Android devices set up for app protection without enrollment
Intune suppresses the enrollment prompt when it detects an Android device configured for app protection without enrollment, even if the setting otherwise prompts users to enroll. Microsoft documents an exception for Surface Duo.
Free tools Windows power users keep installed
One-click scans. No signup required.
Use restrictions to control device eligibility
If your goal is to stop users from enrolling personal devices, hiding Company Portal prompts is not the right control by itself. Configure device platform restrictions separately to manage platform and MDM allowance, personally owned devices, Android manufacturers, and minimum or maximum operating-system versions where supported.
Rank #3
- Brilliant Display – Immersive Brilliance or Incredible image quality – The 13" PixelSense Flow touchscreen offers a vibrant and immersive viewing experience.
- All-day Energy – Up to 23 hours of battery life[1] for local video playback for uninterrupted streaming.
- Power up – Built with the latest Qualcomm Snapdragon X Plus (8 Core) processors, Surface Laptop delivers powerful performance and AI accelerated power.
- Turbocharged NPU – Surface Laptop features the Qualcomm Hexagon NPU that delivers up to 45 TOPS designed to accelerate AI experiences.
- Express your style – Surface Laptop comes in three new colors – Violet, Ocean, and Platinum.[2]
- Assign platform restriction policies to groups and set their priority as needed.
- Edits apply to new enrollments; they do not change devices that are already enrolled.
- OS-version restrictions are supported for the listed platforms only for devices enrolled through Intune Company Portal.
Restrictions are a best-effort barrier for non-malicious users, not a security boundary. Microsoft warns that compromised devices can misrepresent their characteristics, so restrictions should not be treated as a way to guarantee that a device is trustworthy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Set a per-user device enrollment limit separately
Device limit restrictions control how many devices an individual user can enroll; they are distinct from platform restrictions and Company Portal prompt settings. Microsoft’s overview gives a configurable range of 1 to 15 devices per user. Use this control when the concern is enrollment count rather than which platform or ownership type is allowed.
Rank #4
- Microsoft Surface Laptop 5 13.5" | Certified Refurbished, Amazon Renewed | Microsoft Surface Laptop 5 features 12th generation Intel Core i7-1265U processor, 13.5-inch PixelSense Touchscreen Display (2256 x 1504) resolution
- This Certified Refurbished product is tested and certified to look and work like new. The refurbishing process includes functionality testing, basic cleaning, inspection, and repackaging. The product ships with all relevant accessories, a minimum 90-day warranty, and may arrive in a generic box.
- 256GB Solid State Drive, 16GB RAM, Convenient security with Windows Hello sign-in, plus Fingerprint Power Button with Windows Hello and One Touch sign-in on select models., Integrated Intel UHD Graphics
- Surface Laptop 5 for Business 13.5” & 15”: Wi-Fi 6: 802.11ax compatible Bluetooth Footnote Wireless 5.0 technology, Surface Laptop 4 for Business 15” in Platinum and Matte Black metal: 3.40 lb
- 1 x USB-C 1 x USB-A 3.5 mm headphone jack 1 x Surface Connect port
Account for Apple User Enrollment precedence
In the legacy iOS/iPadOS User Enrollment with Company Portal scenario, a user enrollment profile can take precedence over an Intune enrollment restriction policy. Microsoft says this profile type is not supported for newly enrolled devices and recommends account-driven User Enrollment for new enrollments. This caveat is specific to that scenario; confirm the current platform guidance before applying it to another Apple enrollment path.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Match the enrollment method to the device and user
Enrollment flows differ by platform and ownership. For example, personal Android devices can use Android Enterprise work profile enrollment through Company Portal; Apple has User Enrollment, Device Enrollment, and ADE paths; Windows devices have several enrollment routes, including Company Portal. BYOD enrollment commonly starts and finishes in Company Portal, while corporate-owned devices can use more granular management settings.
Before choosing a flow, consider the device’s ownership and use, the management scope required, how much user interaction is expected, and the eligibility or enrollment-count rules you need. These are separate decisions: the Company Portal option governs prompt visibility and portal enrollment access, while platform and device limit restrictions govern eligibility and counts.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
