FILE: C:\Windows\PolicyDefinitions\en-US\MDM.adml

--



  enter display name here
  enter description here
  
    
      MDM
      Disable MDM Enrollment
      This policy setting specifies whether Mobile Device Management (MDM) Enrollment is allowed. When MDM is enabled, it allows the user to have the computer remotely managed by a MDM Server.  

If you do not configure this policy setting, MDM Enrollment will be enabled. 

If you enable this policy setting, MDM Enrollment will be disabled for all users. It will not unenroll existing MDM enrollments.

If you disable this policy setting, MDM Enrollment will be enabled for all users.
      
      Enable automatic MDM enrollment using default Azure AD credentials
      
            This policy setting specifies whether to automatically enroll the device to the Mobile Device Management (MDM) service configured in Azure Active Directory (Azure AD). If the enrollment is successful, the device will remotely managed by the MDM service.

            Important: The device must be registered in Azure AD for enrollment to succeed.

            If you do not configure this policy setting, automatic MDM enrollment will not be initiated.

            If you enable this policy setting, a task is created to initiate enrollment of the device to MDM service specified in the Azure AD.

            If you disable this policy setting, MDM will be unenrolled.
      
      User Credential
      Device Credential
    
    
      
        Select Credential Type to Use:
      
    	
  


--