PRODUCT IOTS » product-uem 6.4.0 GA

In standard enrollments the user is able to disenroll the device unless we use a specific enrollment method like Windows Autopilot and Bulk enrollments using provisioning packages. By using the AllowManualMDMUnenrollment CSP we can disable this option in our normal enrollments as well. Meaning that we do not have to rely on a Azure AD license or Microsoft Intune subscriptions when managing devices through the UEM server.

Below is what the user will see when this restriction is applied on the device.

[1] - https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-experience#allowmanualmdmunenrollment