Devices in AAD not showing in InTune

Question

Hi All,&nbsp;We run a hybrid domain with an on-prem domain controller and sync to Azure AD.The problem I have is getting machines to register in our intune, they are listed in azure AD as "Azure AD Registered" biut with MDM as "none".&nbsp;Whats the easiest way for me to register them in our MEM/Intune?&nbsp;Thanks

rockypabillore · Answer

What is your MDM solution at the moment? SCCM? In order for you to see devices in Intune, you have to enroll them via CoManagement or another way is via auto-enrollment, here's where to start: https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy#:~:text=Auto-enrollment%20into%20Intune%20via%20Group%20Policy%20is%20valid,joined,%20run%20dsregcmd%20/status%20from%20the%20command%20line.

matt cox · Answer

rockypabillore&nbsp;Thanks for the feedback.&nbsp;I have checked the AD Connect settings and AAD, I believe we are syncing correctly.&nbsp;&nbsp;&nbsp;If I go ahead and create a test OU and apply the auto-enrollment GPO should that work?

moe_kinani · Answer

Hi Mat,Two thing you need to do to have Hybrid AD join Machines:1. Configure Hybrid AD Join from ADConnect and then sync to have showing in AAD as Hybrid AAD joined devices.Check Configure Hybrid Azure AD Join section:https://docs.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-managed-domains2. Then assign the proper Intune license and enroll the devices using either Gpo or manually.https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policyHope this helps!Moe

matt cox · Answer

Thanks for the info&nbsp;Moe_Kinani&nbsp;will enabling the &nbsp;Hybrid AD Join have any other impact to users logging in. I would hate for people to not be able to login against our on prem DC's or such like!&nbsp;

moe_kinani · Answer

Nothing will break, except if you remove their record as Azure AD registered (they get prompted to login again). I would wait to see them Hybrid AzureAD joined with MDM and last checking time then delete Azure AD registered.I remember started with syncing only one Workstation from AD, checked everything working as expected then synced all other workstations. Here is how to sync specific OUs, use the article below:https://www.google.com/amp/s/dirteam.com/sander/2019/10/29/howto-use-domain-and-ou-filtering-to-limit-the-objects-in-scope-for-azure-ad-connect/amp/Moe

Forum Discussion

Devices in AAD not showing in InTune

Share

Resources