Forum Discussion
Nikonline
Jun 11, 2021Copper Contributor
WVD - Intune Auto enrolment for AAD only organisation
Hi All, been going round in circles... since we are completely Azure AD organisation, been told that we cannot do Intune Auto-enrolment for our WVD devices? Been pointed to articles that devices need...
lukemurraynz
Jun 11, 2021Learn Expert
You should be able to use Group Policy to do it:
https://www.anoopcnair.com/windows-10-intune-enrollment-using-group-policy-automatic-enrollment-wvd/
Assuming you are running Azure Active Directory Domain Services, you can still configure GPO etc on it, you just need a 'utility box' to be joined to the same network, domain as the ADDS domain as WVD and you can create the GPOs and deploy it to the WVD (sorry Azure Virtual Desktop) boxes.
https://www.anoopcnair.com/windows-10-intune-enrollment-using-group-policy-automatic-enrollment-wvd/
Assuming you are running Azure Active Directory Domain Services, you can still configure GPO etc on it, you just need a 'utility box' to be joined to the same network, domain as the ADDS domain as WVD and you can create the GPOs and deploy it to the WVD (sorry Azure Virtual Desktop) boxes.
- NikonlineJun 11, 2021Copper ContributorThanks Luke for a quick response. Do you have any blogs or articles on configuring GPO on ADDS pls?
- lukemurraynzJun 11, 2021Learn ExpertHere the Microsoft article: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy
Essentially you need:
* A Windows Server management VM that is joined to the Azure AD DS managed domain, in the same network as ADDS.
* Group Policy/AD Management tools installed and you can use that to create/modify the policies etc.
An added note, is that the utility box can be shutdown when not needed to save on cost.- lukemurraynzJun 11, 2021Learn ExpertHeres another good post: https://www.robinhobo.com/how-to-implement-and-manage-azure-ad-domain-services-azure-ad-ds-for-a-fast-windows-virtual-desktop-wvd-poc-deployment/