Forum Discussion

MTSBob's avatar
MTSBob
Iron Contributor
Oct 05, 2018
Solved

Intune auto MDM enrollment for devices already Azure AD joined?

I have a client whose fleet of Windows 10 PC's are already joined to their organizational AAD (company-ownership), without any MDM, but now would like to start using Intune. They've upgraded their lic...
Intune
mobile device management (mdm)
ThinkSync's avatar
ThinkSync
Brass Contributor
Dec 28, 2018

Ok... so to make sure I'm following your scenario :)

 

You have a large deployment of W10 machines in Workgroups (not joined to on-prem Active Directory), which have been Azure device joined (not Hybrid/ADDJ) and you want trigger Intune auto-enrolment?

 

José Luiz Schenardie's avatar
José Luiz Schenardie
Brass Contributor
Dec 28, 2018
Precisely. The need to trigger auto enroll is because i will be heavily using the intune management extension (which is auto deployed only when auto enroll is used)
  • Oliver Kieselbach's avatar
    Oliver Kieselbach
    MVP
    Jan 14, 2019

    Hey José,

     

    currently the supported way is to re-join to trigger Intune Management Extension installation via auto-enroll. The only thing I can tell is the product group is aware of this. No information if it will change but they are aware.

     

    best,

    Oliver

    • José Luiz Schenardie's avatar
      José Luiz Schenardie
      Brass Contributor
      Jan 15, 2019

      Thanks for the reply Oliver. I was just looking for an official confirmation that this is the only supported way. Its going to be tough tell that to our clients but it is what it is.

       

      Thanks

      • Claytonlopes's avatar
        Claytonlopes
        Copper Contributor
        Jan 21, 2019

        Yes that is the only way, had to do it for at least 50 laptops

  • ThinkSync's avatar
    ThinkSync
    Brass Contributor
    Dec 29, 2018

    Hi Jose,

     

    Spent some time testing your scenario in my lab, and as suspected, you don't need to leave AAD and rejoin to trigger silent auto-enrolment :)

     

    Please start another thread, tag me and we'll walk through my results.

     

    Kind regards,

    Matt

    • MTSBob's avatar
      MTSBob
      Iron Contributor
      Dec 30, 2018

      Matt, could you please post your method here in this thread, since it's where the question was originally posted?

       

      Thanks!

      Bob

      • ThinkSync's avatar
        ThinkSync
        Brass Contributor
        Jan 04, 2019

        Hi All,

         

        Auto-Enrolment can be triggered using local policy. Please ensure users are logging into Windows using their Azure AD credentials, the device is Azure AD joined and users have been assigned Intune licenses.

         

        Local policy can be configured using GPEdit.msc or applying the registry key below. Agreed this doesn't help in scenarios where you have roaming users, however the reg key could be deployed using PowerShell when users visit the Office.

         

        ** Tested using W10 - 1809

         

        [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM]
        "AutoEnrollMDM"=dword:00000001

Resources