Policy

Disable MDM Enrollment

This policy setting specifies whether Mobile Device Management (MDM) Enrollment is allowed. When MDM is enabled, it allows the user to have the computer remotely managed by a MDM Server. If you do not configure this policy setting, MDM Enrollment will be enabled. If you enable this policy setting, MDM Enrollment will be disabled for all users. It will not unenroll existing MDM enrollments. If you disable this policy setting, MDM Enrollment will be enabled for all users.

Policy
Pack Microsoft Windows
Category Windows Components / MDM
Policy ID 8c9ab78fa9c6
Internal name MDM_MDM_DisplayName

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\MDM\DisableRegistration (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\MDM\DisableRegistration (disabled) = 0

Policy notes

This policy setting specifies whether Mobile Device Management (MDM) Enrollment is allowed. When MDM is enabled, it allows the user to have the computer remotely managed by a MDM Server. If you do not configure this policy setting, MDM Enrollment will be enabled. If you enable this policy setting, MDM Enrollment will be disabled for all users. It will not unenroll existing MDM enrollments. If you disable this policy setting, MDM Enrollment will be enabled for all users.

Related policies

Enable automatic MDM enrollment using default Azure AD credentials