Forum Discussion

Iron Contributor

Oct 05, 2018

Solved

Intune auto MDM enrollment for devices already Azure AD joined?

I have a client whose fleet of Windows 10 PC's are already joined to their organizational AAD (company-ownership), without any MDM, but now would like to start using Intune. They've upgraded their lic...

Intune

mobile device management (mdm)

Oliver Kieselbach
Oct 06, 2018
Hi Bob,

auto-enrollment is not supported when not used with OOBE and AADJ. But you could use an approach to guide users to MDM enrollment by sending out deep links via email for example. See here:

https://docs.microsoft.com/en-us/windows/client-management/mdm/mdm-enrollment-of-windows-devices#connecting-to-mdm-using-a-deep-link

best,

Oliver

José Luiz Schenardie

Brass Contributor

Dec 28, 2018

The devices are already and only azure ad joined. As mentioned the solution seems to be leave azure ad and re-join, what is really impracticable for large deployments

ThinkSync

Brass Contributor

Dec 28, 2018

Ok... so to make sure I'm following your scenario :)

You have a large deployment of W10 machines in Workgroups (not joined to on-prem Active Directory), which have been Azure device joined (not Hybrid/ADDJ) and you want trigger Intune auto-enrolment?

José Luiz Schenardie
Brass Contributor
Dec 28, 2018
Precisely. The need to trigger auto enroll is because i will be heavily using the intune management extension (which is auto deployed only when auto enroll is used)
- Oliver Kieselbach
  MVP
  Jan 14, 2019
  Hey José,
  
  currently the supported way is to re-join to trigger Intune Management Extension installation via auto-enroll. The only thing I can tell is the product group is aware of this. No information if it will change but they are aware.
  
  best,
  
  Oliver
  - José Luiz Schenardie
    Brass Contributor
    Jan 15, 2019
    Thanks for the reply Oliver. I was just looking for an official confirmation that this is the only supported way. Its going to be tough tell that to our clients but it is what it is.
    
    Thanks
- ThinkSync
  Brass Contributor
  Dec 29, 2018
  Hi Jose,
  
  Spent some time testing your scenario in my lab, and as suspected, you don't need to leave AAD and rejoin to trigger silent auto-enrolment :)
  
  Please start another thread, tag me and we'll walk through my results.
  
  Kind regards,
  Matt
  - MTSBob
    Iron Contributor
    Dec 30, 2018
    Matt, could you please post your method here in this thread, since it's where the question was originally posted?
    
    Thanks!
    Bob