Forum Discussion
StefanKi
Jun 27, 2019Iron Contributor
clients autoenroll without user input
Hallo,
all our clients are joined to an active directory. Is there a way to enroll Intune MDM on this devices without user input?
To connect our AD into Azure AD we use ad connect.
Thanks for your help
Stefan
- jenstfBrass Contributor
Is the clients hybrid Azure AD joined?
If so, do a local GPO:
- Navigate to Computer Policy > Administrative Templates > Windows Components > MDM
- Enable the MDM Autoenrollment Policy
JT
- StefanKiIron Contributor
jenstfThanks for your good answer
How I can bring the clients to Azure AD joined?
I do not want do disconnect the clients form the internal AD Domin.
Edit: Is this the right way https://docs.microsoft.com/de-de/azure/active-directory/devices/hybrid-azuread-join-managed-domains ?
- Adam Weldon-MingBrass Contributor
Hey,
You need to do 3 things at a high level.
- Configure Azure AD Connect for Azure AD Hybrid Join using the Azure AD Connect wizard
- Enable “Register domain-joined computers as devices” via Group Policy under
Computer Configuration > Policies > Administrative Templates > Windows Components > Device Registration.
- Set a GPO to enrol on-prem devices (Windows 10) into Intune MDM
Create a (GPO) and enable theComputer Configuration > Policies > Administrative Templates > Windows Components > MDM > Enable automatic MDM enrollment using default Azure AD credentials
Here is a good starting block for point 1 and 2:
https://www.adamfowlerit.com/2018/08/azure-ad-hybrid-joined-devices-overview/Point 3