Enrollment Options Available to W10 AD Domain Joined Devices

Question

Hi All&nbsp;Any other options available for Windows 10 domain joined devices.&nbsp;Option 1:Enroll via Settings &gt; Accounts &gt; Work or School &gt; Enroll in MDM OnlyDevice shows as Azure AD Registered / Personal device&nbsp;What if personal devices are blocked from enrolling?Is there any other method to get these devices enrolled as Corporate?&nbsp;Option 2:&nbsp;Hybrid Azure AD JoinSimple enough on a managed / unfederated domainQuite complex if not&nbsp;Any other options available for enrolling Windows 10 domain joined devices as Corporate / Company owned devices?&nbsp;Info appreciated&nbsp;&nbsp;

swejorgenmvp · Answer

StuartK73&nbsp;There is a great article on Docs that summarizes all the options you have.
https://docs.microsoft.com/sv-se/intune/enrollment-restrictions-set
&nbsp;
The following methods qualify as being authorized as a Windows corporate enrollment:

The enrolling user is using a&nbsp;device enrollment manager account.
The device enrolls through&nbsp;Windows AutoPilot.
The device is registered with Windows Autopilot but isn't an MDM enrollment only option from Windows Settings.
The device’s IMEI number is listed in&nbsp;Device enrollment&nbsp;&gt;&nbsp;Corporate device identifiers.&nbsp;(Not supported for Windows Phone 8.1.)
The device enrolls through a&nbsp;bulk provisioning package.
The device enrolls through GPO, or&nbsp;automatic enrollment from SCCM for co-management

ambarishrh · Answer

StuartK73&nbsp;Have you seen autopilot?&nbsp;https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot

stuartk73 · Answer

ambarishrh&nbsp;&nbsp;Requires Hybrid for AD Joined machines I believe which is what I'm trying to avoid!!

Forum Discussion

Enrollment Options Available to W10 AD Domain Joined Devices

Share

Resources