Best way to join AzureAD devices to Intune

sidhinsasi
Copper Contributor
Mar 23, 2023
Rudy_Ooms_MVP

thanks Rudy. i was able to get it working after tweaking the deploy method in Tanium 🙂
- Rudy_Ooms_MVP
  MVP
  Mar 23, 2023
  sidhinsasi
  
  nice to hear ! Could you explain what you die change? For people experiencing the same issue
  - sidhinsasi
    Copper Contributor
    Mar 23, 2023
    Rudy_Ooms_MVP
    First ran the Option 3 (Powershell) in your solution
    $registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM"
    New-Item -Path $registryPath
    $Name = "AutoEnrollMDM"
    $Name2 = "UseAADCredentialType"
    $value = "1"
    new-ItemProperty -Path $registryPath -Name $name -Value $value -PropertyType DWORD -Force | Out-Null
    new-ItemProperty -Path $registryPath -Name $name2 -Value $value -PropertyType DWORD -Force | Out-Null
    
    Then ran the earlier script
    
    $key = 'SYSTEM\CurrentControlSet\Control\CloudDomainJoin\TenantInfo\*'
    $keyinfo = Get-Item "HKLM:\$key"
    $url = $keyinfo.name
    $url = $url.Split("\")[-1]
    $path = "HKLM:\SYSTEM\CurrentControlSet\Control\CloudDomainJoin\TenantInfo\$url"
    New-ItemProperty -LiteralPath $path -Name 'MdmEnrollmentUrl' -Value 'https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc' -PropertyType String -Force -ea SilentlyContinue;
    New-ItemProperty -LiteralPath $path -Name 'MdmTermsOfUseUrl' -Value 'https://portal.manage.microsoft.com/TermsofUse.aspx' -PropertyType String -Force -ea SilentlyContinue;
    New-ItemProperty -LiteralPath $path -Name 'MdmComplianceUrl' -Value 'https://portal.manage.microsoft.com/?portalAction=Compliance' -PropertyType String -Force -ea SilentlyContinue;
    Finally
    C:\Windows\system32\deviceenroller.exe /c /AutoEnrollMDM
    And it was very quick I should say

Forum Discussion

Best way to join AzureAD devices to Intune