Microsoft Intune announces device-only subscription for shared resources

JimmyWork 

Thanks for reply. In our case we are going to place these kiosk devices in office premises for external users so they wont have licenses in our tenant but we need to get license for device and need to assign it so we can create multi app kiosk device with different apps like Excel, PowerPoint, and other office apps as per requirements. 

So the question is which license we need to get and where to get it and how to setup multi app kiosk device?

VinodS2020 My other post was deleted where i reference Microsoft own terms.

If the user using the device is licensed then you dont need a device licenses as you are covered by the license on the user.

If you have users using the device that is not licensed, then you need a device license

This is really not clear which license to be used for kiosk device on Windows OS. Nobody is able to give clear picture on this. there is lot of confusion about this when I raise support ticket they were not able to understand and give me the solution on this. my experience is very bad so far and I am trying to get the right info for this to setup multi app kiosk devices with Intune no luck since last 2 weeks I am struggling on this. 

MatAitAzzouzene Mayunk_Jain 

Same question here.

We have A5 licenses for all our users Education.
We need to have Android Kiosk Mode tablets, do we need device-license even if all our users are licensed already?
To use the KIOSK device the user needs to sign in to their session with the domain account. The user has a Intune license but no device license.

Hi Mayunk_Jain

---

Mayunk_Jain wrote:

To clarify, if you already have sufficient M365 E5 or EMS/Intune user licenses to cover all your self-deploying devices, you may not need additional device-only SKU.

---

Is this statement still true? I can't find any mention of it in the Intune per-device license documentation:
Device only licenses - learn.microsoft.com 

Hi,

We bought the Microsoft Intune Device licenses but didn't have Azure Premium AD, we are on Office 365 and Azure Active Directory.

I tried connecting a user's account with the license of Intune but I don't see any difference.

I mean I can see my devices on Azure Active Directory under "Azure AD registered" but when I go to Microsoft Endpoint Manager, I don't see any devices. 

Why? Any help would be appreciated.

Mayunk_Jain If we do not have EMS license and purchased Intune Device license then how we can assign that license for Android Dedicated device enrollment where no user account is there and how Android device is enrolling as Dedicated enrollment without assigning license (as no entry exist in Azure or in Intune for now)?

It will be helpful if this can be answered and big challenge/surprise is that we all are able to enroll Android devices and iOS devices as without user affinity and without assigning any Intune device based license (as license can only be assigned if we will get entry of device in Intune or Azure)

Is Microsoft providing smooth/free enrollments for Dedicated Android and iOS devices without any cost of Intune Device/User based license?

I work in Education and we have a similar issue with Intune licensing that we once had with M365 Apps licensing. M365 Apps solved that issue by offering free device licenses to EES/Campus licensed organisations. These device licenses make the Apps licensed to the device itself and not an individual user.

We have an issue, which admittedly will be relatively rare elsewhere, where we still have a few thousand users who are not yet on Active Directory. Their computers are joined to the domain but they do not use AD accounts of any kind. Therefore, we have circumstances where a licensed user may not logon to these computers. Without that, they never enrol in Intune. This is a significant compromise to our management as we are trying to focus on Intune as being the primary managing system. Our security configuration depends on Intune. Intune being tied to a licensed user is a real Achilles' Heel in this scenario. We could do with device licensing like that available for M365 Apps, so that we can manage all of our devices without requiring an AD logon to occur. Why has this been dealt with for M365 Apps but not Intune? Perhaps their implementation could be used as a template.

We have around 120 schools to look after and only a small IT team looking after them. We had hoped that each device would be logged onto at least once by the IT team but with the pandemic and other circumstances, that hasn't happened.

We do intend to solve the lack of AD accounts but that project has been having some implementation difficulties that have led to delay after delay.

I doubt we're the only Education customer that would really benefit from the ability to license Intune on a device basis to negate the requirement for a licensed user. The ESS/Campus model does not count devices and thus it shouldn't be a threat to Microsoft's profits.

Is it the expected behavior that when a device is enrolled with user affinity with both user based and device based configuration policies that if another users logs onto to that device and is not the primary user or a unlicensed user, the configuration policies will be removed. For example the wifi device configuration policy will no longer be applied ? I am looking for clarity on this behavior. Is it by design. Can only the primary user or maybe even a secondary licensed user (User license) log onto the device and still expect the device policies to remain intact ? Any insights would be appreciated ...

We are developing new Kiosk profile leveraging Intune configuration profile: Kiosk. At this moment we cannot fully automate the Kiosk setup (using for example a freshly download Windows 10 ISO 20H2 from Microsoft) because at startup it will prompt us for user credentials. while we have already upload hardware hashes to Intune/AzureAD. Maybe this automation is not possible? without customizing the (clean) image.

So the Intune device based licensing sounds like something we want to have. But where to find more information how to setup? Again, we do not want to provide a user account (with appropriate license), that should be possible with device-only subscription you have introduced?