Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To control how users are prompted to enroll through Intune Company Portal, change the tenant’s Device enrollment option in Company Portal customization. Choose Available, with prompts to surface enrollment throughout the portal, Available, no prompts to leave enrollment available without proactive prompts, or Unavailable to remove the Company Portal enrollment route. This setting controls the portal experience; use enrollment restrictions to control which devices are eligible or how many a user may enroll.
Choose the Company Portal enrollment experience
In the Intune admin center, open the Company Portal customization settings for the tenant and set Device enrollment. Microsoft describes this setting as controlling if and how users are prompted to enroll devices in mobile device management.
| Option | What users can do or see | When it fits |
|---|---|---|
| Available, with prompts | The default experience. Company Portal prompts users to enroll in all possible locations. | Use when you want enrollment surfaced proactively. |
| Available, no prompts | Users do not see enrollment checklist prompts or notifications, but can still start enrollment from their current device’s details or from an app that requires enrollment. | Use when enrollment should remain possible without proactive reminders. |
| Unavailable | Users cannot enroll through Company Portal, and apps that require enrollment are hidden. | Use when users should not enroll through this Company Portal experience. |
The setting changes the availability and visibility of enrollment in Company Portal. It is not a device eligibility policy: hiding prompts does not by itself prevent a user from enrolling through every other supported enrollment path.
Recommended Free Tools
Stop personal-device enrollment with restrictions, not prompt settings
If the goal is to prevent users from enrolling personal devices, review device platform restrictions separately. Depending on platform support, these policies can control whether a platform or MDM enrollment is allowed, whether personally owned devices are allowed, which Android manufacturers are permitted, and minimum or maximum OS versions. Restrictions are assigned to groups, and administrators can change policy priority.
#1 Best Overall
- [This is a Copilot+ PC] — The fastest, most intelligent Windows PC ever, with built-in AI tools that help you write, summarize, and multitask — all while keeping your data and privacy secure.
- [The Power of a Laptop, the Flexibility of a Tablet] — Surface Pro 12” is a 2-in-1 device that adapts to you. Use it as a tablet for on-the-go tasks, prop it up with the built-in kickstand, or attach the Surface Pro Keyboard (sold separately) to turn it into a full laptop.
- [Incredibly Fast and Intelligent] — Powered by the latest Snapdragon X Plus processor and an AI engine that delivers up to 45 trillion operations per second — for smooth, responsive, and smarter performance.
- [All Day Battery Life] — Up to 16 hours of battery life[1] means you can work, stream, and create wherever the day takes you — without reaching for a charger.
- [Brilliant 12” Touchscreen Display] — The PixelSense display delivers vibrant color and crisp detail in a sleek design — perfect for work, entertainment, or both.
- Use Company Portal’s Device enrollment option to control prompts and enrollment availability through that portal.
- Use platform restrictions to define device eligibility, such as whether personally owned devices or a particular platform may enroll.
- Use device limit restrictions to set how many devices an individual user may enroll. Microsoft documents a range of 1 to 15 devices per user.
Platform restriction edits apply to new enrollments and do not change devices that are already enrolled. Microsoft also cautions that enrollment restrictions are not security features: compromised devices can misrepresent their characteristics, so restrictions are a best-effort barrier for non-malicious users, not a complete security boundary.
Account for platform-specific enrollment behavior
Apple Automated Device Enrollment
The Company Portal setting does not govern iOS/iPadOS devices configured for Apple Automated Device Enrollment (ADE). Those devices enroll during out-of-box setup regardless of the customization. When users later open Company Portal, they are prompted to sign in.
Rank #2
- Laptop Size: This renewed Microsoft Surface Pro 7+ Tablet, has a screen size of 12.3 " and touch display. The 2736 X 1824 Pixel anti-glare screen, mostly reduces fatigue when using it, allowing you to focus on work. With a light weight, this Microsoft Surface refurbished laptop is a great choice for your Business and entertainment.
- Processor: This Renewed Surface Pro 7 Plus Tablet is installed with Intel Core i5-1135 G7 (2.4GHz-4.2GHz, 4Cores, 8Threads, 8 MB Intel Smart Cache), meeting the fast and stable operation of most programs.
- Powerful Memory: This refurbished Tablet has installed 8GB of RAM running memory and 256GB of Solid State Drive for you, allowing you to run multiple software and browsers at the same time with confidence, the Microsoft Surface powerful hard drive gives you enough space to download files!
- Multiple Ports:USB 3.0, microSD card reader(Optional), Headphone jact, Mini DisplayPort, Cover port, Charging port, this Microsoft SurfaceTablet allows you to fully enjoy the pleasure brought by technology.
- System: Windows 11 Pro is recognized as the most stable operating system, which is mostly for both commercial and professional users. Windows 11 Pro provides more security and management features for this used Surface Pro 7 (+) Tablet, as well as supporting virtualization and remote access. Meanwhile, it supports multiple languages, including English, French, Spanish, German, etc.
Samsung Knox Mobile Enrollment
The setting does apply to Android devices configured with Samsung Knox Mobile Enrollment. If Device enrollment is set to Unavailable, the device does not enroll during out-of-box setup.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsAndroid app protection without enrollment
On Android, Intune suppresses the enrollment prompt when it detects a device configured for app protection without enrollment, even if the Company Portal setting would otherwise ask the user to enroll. Microsoft documents an exception for Surface Duo.
Rank #3
- A PREMIUM PERFORMANCE 2-IN-1 LAPTOP & TABLET — Ready for work, school, and creativity. Built for busy days, big projects, and nonstop multitasking. Run video calls, school and work apps, 20+ browser tabs, and AI tools at the same time without slowing down.
- WITH AI BUILT IN — With a dedicated AI chip (Qualcomm Snapdragon X2 Plus), this Copilot+ PC[5] on Windows 11 helps you work smarter and faster. Prompt, create, and automate with ease — ready for even your most demanding tasks.
- A STUNNING 13" OLED TOUCHSCREEN — Sharp colors, real detail, and smooth 120Hz scrolling on the PixelSense touchscreen[1] with LCD display[2]. Tap, scroll, draw, or pinch to zoom — whichever feels right for streaming, sketching, or daily work.
- 15.5 HOURS OF BATTERY (LEAVE THE CHARGER) — Up to 15.5 hours of video playback[3] on a single charge. Work from a coffee shop, take it to class/work, or binge a season on a long flight — it'll keep up.
- THE PORTS YOU NEED — Two USB-C / USB4[4] ports for fast charging, big file transfers, or hooking up to three 4K monitors when you want a full desktop. Wi-Fi 7 keeps you online and fast wherever you are.
Legacy Apple User Enrollment profile
In the legacy iOS/iPadOS User Enrollment with Company Portal scenario, a user enrollment profile can take precedence over an Intune enrollment restriction policy. Microsoft says this profile type is not supported for newly enrolled devices and recommends account-driven User Enrollment for new enrollments. Treat this as specific to that legacy scenario; do not assume the same precedence for other Apple enrollment paths.
Check Company Portal versions before relying on the setting
Microsoft lists minimum Company Portal versions of 4.4 for iOS/iPadOS and 5.0.5421.0 for Android for the documented behavior. Support for Android Company Portal versions earlier than 5.0.5421.0 ended on October 1, 2025; Microsoft warns older versions might lose registration status and be marked noncompliant. Make sure affected users are on supported versions when rolling out a change.
Rank #4
- Intel Core i5-1035G4 3.70GHz processor, 128GB SSD Drive
- 8GB RAM, Wireless: 802.11a/b/g/n/ac Wi-Fi, Bluetooth 4.0
- Ports: Full-size USB 3.0; microSD card reader; Headphone jack; Mini DisplayPort; Cover port; Charging port, Camera: 5MP front-facing and 8MP rear-facing cameras with 1080p HD video recording
- Display: 12.3-inch PixelSense touchscreen display; 2736 x 1824 resolution, Stereo speakers with Dolby Audio-enhanced sound
- Operating System: Windows 10 Home, Intel Iris Plus Graphics
Match the enrollment route to ownership and management needs
Company Portal is one part of Intune’s broader enrollment model. BYOD users commonly start and complete enrollment through Company Portal, while corporate-owned devices can use more granular management settings. Available routes also differ by platform and ownership: Microsoft documents Android Enterprise work profile enrollment for personal devices, Apple User Enrollment and Device Enrollment, Apple ADE, and multiple Windows enrollment routes, including Company Portal.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Before choosing a route, establish who owns the device, whether management should cover only work data or more of the device, whether the user should sign in and act or enrollment should happen automatically, and which platform or enrollment-count limits apply. The enrollment prompt setting answers only the user-experience part of that decision.
Quick Recap
Best Value
- Microsoft Surface Pro 7+ 12.3" Tablet 2-in-1 Laptop, Amazon Renewed, Core i3 with 128GB SSD and 8GB RAM
- More ways to connect, with both USB-C and USB-A ports for connecting to displays, docking stations and more, as well as accessory charging, Platinum Silver Color
- Standout design that won’t weigh you down — ultra-slim and light Surface Pro 7+ starts at just 1.70 pounds. Aspect ratio: 3:2
- Intel Core i3-1114G5 (1.70-3.0Ghz) | 128GB SSD | 8GB RAM | Windows 11 Professional Installed
- Screen: 12.3” PixelSense Display | Resolution: 2736 x 1824 (267 PPI) | Faster than Surface Pro 6, with a 10th Gen Intel Core Processor – redefining what’s possible in a thin and light computer. Wireless : Wi-Fi 6: 802.11ax compatible. Bluetooth Wireless 5.0 technology
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
