Disable MDM Enrollment

This policy setting specifies whether Mobile Device Management (MDM) Enrollment is allowed. When MDM is enabled, it allows the user to have the computer remotely managed by a MDM Server.

If you do not configure this policy setting, MDM Enrollment will be enabled.

If you enable this policy setting, MDM Enrollment will be disabled for all users. It will not unenroll existing MDM enrollments.

If you disable this policy setting, MDM Enrollment will be enabled for all users.

Supported on: At least Windows 10 or Windows 10 RT

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\CurrentVersion\MDM
Value NameDisableRegistration
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

mdm.admx

Administrative Templates (Computers)

Administrative Templates (Users)