Exam MS-101 topic 1 question 11 discussion

I believe it should be No, No, No The device enrollment manager role only gives you the option to enroll up to 1000 devices. I think enrollment OS type restricions still apply

Answer is definitely correct... NNY Device limit restrictions don't apply for the following Windows enrollment types: - Co-managed enrollments - GPO enrollments - Azure Active Directory joined enrollments - Bulk Azure Active Directory joined enrollments - Autopilot enrollments - Device Enrollment Manager enrollments Device limit restrictions are not enforced for these enrollment types because they're considered shared device scenarios. You can set hard limits for these enrollment types in Azure Active Directory. https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set

Didn't test this, but No, No, Yes. If you google "device type restrictions in mem" You get two results, the first is https://learn.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set the second is https://learn.microsoft.com/en-us/mem/intune/enrollment/create-device-platform-restrictions These are actually in the same hierarchy, on the first link it says: "Device limit restrictions can't be applied to devices in the following Windows enrollment scenarios, because these scenarios utilize shared device mode: Co-managed enrollments ... Device enrollment manager enrollments" The second link which more explicitly says "device type restrictions" rather than "Limitations" but even the bullet point above the one I posted says, "Device enrollment limitations apply to users", then lists all the ways users enroll, not isn't in the list. DEM is using shared device mode, so not subject to those limitations. I think the swapping between limitations and restrictions is getting everyone confused. If you look, it's covering the same topic. Do your research, test it out if you have the time and capability.

The original answer is correct. User 3 is a device enrollment manager. There are certain limits on a DEM. One of the limits is that conditional access only applies if the device you are enrolling is Windows 10 1803 or Windows 11. You can enroll certain iOS and Android devices.

NO, No, No..The first are simple to understand..the 3rd one is No as stated on MS site. (https://docs.microsoft.com/en-gb/mem/intune/enrollment/device-enrollment-manager-enroll) Apple Automated Device Enrollment DEM isn't compatible with Apple Automated Device Enrollment (ADE).

As stated by Techtest848 and OneplusOne this should be No, No, No. Unless of course NONE (which is in bold) is the name of a group. DEM account does bypass the Device limit restriction, but not Device type.

answers are correct

I say it's N, N, N. User1, in Group1, can't add a Windows machine because Group1 is applied to policy 3 allowing Android. User2, In Group1/2, can't add an Android device because Group2 is a higher priority allowing Windows only. User3 isn't a member of any group. The only policy that works for this is the Default policy allowing Android, and Windows Only. So User3 cannot add an iOS device.

No, No, Yes

https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#create-a-device-limit-restriction look at the Important block: Device limit restrictions don't apply for the following Windows enrollment types: ... Device Enrollment Manager enrollments NNY

N,N,Y https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set this does not apply to DEmanager as described in the link below

N, N, Y User1: Group 1: Policy 3, Android and iOS only User2: Group 2: Policy 2, Windows Only User3: No group but DEM can enroll up to 1000 devices

Answers are correct.