Separate Windows enrollment classification from lasting Intune ownership

Source facts

Windows corporate identifiers affect enrollment-time classification, not the device’s lasting ownership record. The Windows identifier combines manufacturer, model, and serial number; all three must match. For Add Work Account enrollment, a matching device can pass the corporate enrollment check but subsequently appear as personal. Deleting an enrolled device’s identifier does not change its ownership. Microsoft Learn.

Applicability

Review this distinction when troubleshooting a Windows enrollment restriction or reconciling an ownership report. Confirm the documented OS-build requirements and exact enrollment route before attributing an outcome to the identifier list.

DSE recommendation

Maintain separate acceptance fields for admission during enrollment and ownership after enrollment. Compare the submitted manufacturer, model, and serial values with the device evidence, then record which enrollment path was used. Route any requested ownership correction through an approved device-record change rather than repeatedly replacing the imported identifier.

Verification

Test the intended enrollment route on a controlled device and capture both the restriction decision and the settled ownership property. Ask the reviewer to explain any difference using the source’s enrollment-method table. Do not treat successful CSV import as proof of either result. Retain the sanitized identifier match and final device record without placing unrelated personal inventory in the test evidence.

Official references

Microsoft Learn: Add corporate identifiers to Intune.