Home

Bulk Enroll Windows 10 devices into Intune?

%3CLINGO-SUB%20id%3D%22lingo-sub-69241%22%20slang%3D%22en-US%22%3EBulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-69241%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20anyone%20tell%20me%20if%20there%20is%20a%20way%20to%20bulk%20enroll%20Windows%2010%2C%20AD%20(on-prem)%26nbsp%3Bjoined%2C%20devices%20into%26nbsp%3BIntune%3F%26nbsp%3B%20The%20only%20bulk%20enrollment%20options%20I'm%20seeing%20done%20is%20done%20during%20your%20typical%20auto%20enroll%20after%20binding%20to%20Azure%20AD%20(which%20we%20do%20in%20small%20cases)%2C%20but%20I%20odnt%20think%20we%20are%20ready%20to%20move%20all%20of%20our%20devices%20to%20Azure%20AD%20and%20dump%20on%20the%20fine-tooth%20managment%20we%20get%20through%26nbsp%3Bour%20GPO%20and%20the%20like%20on-prem.%26nbsp%3B%26nbsp%3BWithout%20binding%20to%20AzureAD%2C%20looking%20at%20the%20documentation%20it%20looks%20like%20our%20only%20supported%20options%20for%20enrollment%20are%26nbsp%3Ba%20DEM%20based%20or%20BYOD%20based%20enrollment%20and%20that%20presents%20us%20with%20some%20problems.%26nbsp%3B%26nbsp%3BI%20work%20for%20a%26nbsp%3Blarge%20K-12%20school%20district%26nbsp%3Bwith%26nbsp%3B23%2C000%20Windows%20devices%20we%20need%26nbsp%3Benrolled%20into%26nbsp%3BIntune%26nbsp%3Bmost%20of%20which%20are%20in%26nbsp%3Bcomputer%20labs%20or%20carts%26nbsp%3B%26nbsp%3Band%20doing%20all%20of%20these%20devices%20by%20hand%26nbsp%3B%20will%20generate%20an%20additional%26nbsp%3Bmassive%20work%20load%20for%20staff%20even%20if%20we%20were%20to%20go%20the%20Intune%20for%20Education%20flashdrive%20route.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAlso%20worth%20noting%20--%20and%20to%20just%20throw%20in%20another%20wrinkle%20--%20we%20are%20not%20a%20SCCM%20shop.%20We%20use%20Altiris%20for%20software%20and%20desktop%20managment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%2C%20thoughts%3F%26nbsp%3B%20Suggestions%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-69241%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-140567%22%20slang%3D%22en-US%22%3ERe%3A%20Bulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-140567%22%20slang%3D%22en-US%22%3E%3CP%3EAvailable%20now%20in%20Win10%201709%20via%20GPO!!!!%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Fmdm%2Fenroll-a-windows-10-device-automatically-using-group-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Fmdm%2Fenroll-a-windows-10-device-automatically-using-group-policy%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-72090%22%20slang%3D%22en-US%22%3ERe%3A%20Bulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-72090%22%20slang%3D%22en-US%22%3E%3CP%3EDoesn't%20using%20a%20provisioning%20profile%20sort%20of%20dictate%20that%20you%26nbsp%3Bbind%20the%20device%20to%20Azure%20AD%20rather%20than%20on-prem%20AD%3F%26nbsp%3B%20Can%20you%20build%20a%20provisioning%20profile%20that%20enrolls%20into%20Intune%20without%20binding%20to%20AzureAD%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-69762%22%20slang%3D%22en-US%22%3ERe%3A%20Bulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-69762%22%20slang%3D%22en-US%22%3E%3CP%3EUsing%20provisioning%20packages%20is%20the%20best%20open%20which%20is%20now%20part%20of%20the%20preview%20in%20the%20Azure%20portal.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E'You%20may%20have%20to%20create%20an%20enrolment%20profile%20which%20will%20contain%20that%20information%2C%20similar%20as%20you%20would%20do%20for%20Configorator%20or%20DEP.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eany%20issues%20pop%20pop%20up%20a%20comment%20on%20here%20and%20I'll%20get%20some%20screen%20grabs.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-69410%22%20slang%3D%22en-US%22%3ERe%3A%20Bulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-69410%22%20slang%3D%22en-US%22%3EThe%20URLs%20you%20seek%20are%20under%20the%20Azure%20AD%20Mobility%20blade.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-69369%22%20slang%3D%22en-US%22%3ERe%3A%20Bulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-69369%22%20slang%3D%22en-US%22%3E%3CP%3EOn%20review%2C%20a%20provisioning%20probile%26nbsp%3Blooks%20like%20it%20could%20work.%26nbsp%3B%20However%2C%20%26nbsp%3BI%20have%20no%20idea%20what%20any%20of%20the%20following%20would%20be%20for%20Intune%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDiscoveryServiceFullURL%3C%2FP%3E%3CP%3EEnrollmentServiceFullURL%3C%2FP%3E%3CP%3EPolicyServiceFullURL%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-69269%22%20slang%3D%22en-US%22%3ERe%3A%20Bulk%20Enroll%20Windows%2010%20devices%20into%20Intune%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-69269%22%20slang%3D%22en-US%22%3E%3CP%3ESo%2C%20I%20just%20found%20%3CA%20href%3D%22https%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fwindows%2Fhardware%2Fcommercialize%2Fcustomize%2Fmdm%2Fbulk-enrollment-using-windows-provisioning-tool%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ethis%20article%3C%2FA%3E%26nbsp%3Bpublished%20two%20days%20ago%20that%20may%20resolve%20this%20issue.%26nbsp%3B%26nbsp%3BI%20will%20take%20a%20look%20at%20this%20and%20report%20back%20on%20whether%20it%20resolves%20the%20issue%20subscribed%20above.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E(Full%20URL%20Of%20Article%3A%26nbsp%3B%20%3CA%20href%3D%22https%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fwindows%2Fhardware%2Fcommercialize%2Fcustomize%2Fmdm%2Fbulk-enrollment-using-windows-provisioning-tool%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fwindows%2Fhardware%2Fcommercialize%2Fcustomize%2Fmdm%2Fbulk-enrollment-using-windows-provisioning-tool%3C%2FA%3E)%3C%2FP%3E%3C%2FLINGO-BODY%3E
Deleted
Not applicable

Can anyone tell me if there is a way to bulk enroll Windows 10, AD (on-prem) joined, devices into Intune?  The only bulk enrollment options I'm seeing done is done during your typical auto enroll after binding to Azure AD (which we do in small cases), but I odnt think we are ready to move all of our devices to Azure AD and dump on the fine-tooth managment we get through our GPO and the like on-prem.  Without binding to AzureAD, looking at the documentation it looks like our only supported options for enrollment are a DEM based or BYOD based enrollment and that presents us with some problems.  I work for a large K-12 school district with 23,000 Windows devices we need enrolled into Intune most of which are in computer labs or carts  and doing all of these devices by hand  will generate an additional massive work load for staff even if we were to go the Intune for Education flashdrive route. 

 

Also worth noting -- and to just throw in another wrinkle -- we are not a SCCM shop. We use Altiris for software and desktop managment.

 

So, thoughts?  Suggestions?

6 Replies

So, I just found this article published two days ago that may resolve this issue.  I will take a look at this and report back on whether it resolves the issue subscribed above. 

 

(Full URL Of Article:  https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/bulk-enrollment-using-...)

On review, a provisioning probile looks like it could work.  However,  I have no idea what any of the following would be for Intune:

 

DiscoveryServiceFullURL

EnrollmentServiceFullURL

PolicyServiceFullURL 

 

 

The URLs you seek are under the Azure AD Mobility blade.

Using provisioning packages is the best open which is now part of the preview in the Azure portal. 

 

'You may have to create an enrolment profile which will contain that information, similar as you would do for Configorator or DEP. 

 

any issues pop pop up a comment on here and I'll get some screen grabs. 

Doesn't using a provisioning profile sort of dictate that you bind the device to Azure AD rather than on-prem AD?  Can you build a provisioning profile that enrolls into Intune without binding to AzureAD

Related Conversations
Extentions Synchronization
Deleted in Discussions on
3 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies