Adding Microsoft Intune Device Enrollment Manager

In this short post we will look at steps for adding Microsoft Intune device enrollment manager. The question is what is device enrollment manager and why do you need it. The device enrollment manager is an account that can enroll devices in Intune. A device enrollment manager can enroll up to 1000 devices. Do not get confused with Intune admin account and a DEM account. However a device enrollment manager user cannot be an Intune admin. To designate the user as DEM the user account must be present in Intune console. In other words the users must be already created before you designate them as DEM.

The devices enrolled by device enrollment manager comes with certain limitations. I wouldn’t worry about the limitations much here. One important limitation that I see is the capability to unenroll the devices. The DEM user cannot unenroll DEM-enrolled devices on the device using the Company Portal. Only the Intune admin has this capability and not the DEM user. Let’s proceed further now and see how to add DEM.

Adding Microsoft Intune Device Enrollment Manager

Let’s look at the steps for adding Microsoft Intune device enrollment manager. In the Azure portal look for Device enrollment under Manage.

Click Device enrollment managers. On the right pane click on + Add.

Type the user principal name or the user account that will be a DEM. Click Add.

That’s it. You have added a new device enrollment manager. This account can now enroll the devices.

How to delete device enrollment manager – To delete a device enrollment manager, select the account and hit delete. The user won’t be deleted from Intune. However the user cannot enroll the devices any further.

After deleting DEM, what happens to devices enrolled by DEM – There should be no issues there. Deleting DEM will not affect enrolled devices. Enrolled devices continue to be fully managed.