clients autoenroll without user input

[Stefan Kießig]

Hallo,

all our clients are joined to an active directory. Is there a way to enroll Intune MDM on this devices without user input?

To connect our AD into Azure AD we use ad connect.

Thanks for your help

Stefan

[#2]

Is the clients hybrid Azure AD joined?

If so, do a local GPO:

• Navigate to Computer Policy > Administrative Templates > Windows Components > MDM
• Enable the MDM Autoenrollment Policy

JT

[#3]

@jenstfThanks for your good answer

How I can bring the clients to Azure AD joined?

I do not want do disconnect the clients form the internal AD Domin.

Edit: Is this the right way https://docs.microsoft.com/de-de/azure/active-directory/devices/hybrid-azuread-join-managed-domains ?

[#4]

Yes, that article is a good starting point and with Hybrid AAD enabled you are on your way to get rid of the stuff on the ground and move to the sky :D

[#5]

@Stefan Kießig 

Hey,

You need to do 3 things at a high level.

1. Configure Azure AD Connect for Azure AD Hybrid Join using the Azure AD Connect wizard
2. Enable “Register domain-joined computers as devices” via Group Policy under 

   Computer Configuration > Policies > Administrative Templates > Windows Components > Device Registration.

3.  Set a GPO to enrol on-prem devices (Windows 10) into Intune MDM
   Create a (GPO) and enable the

   Computer Configuration > Policies > Administrative Templates > Windows Components > MDM > Enable automatic MDM enrollment using default Azure AD credentials

Here is a good starting block for point 1 and 2:
https://www.adamfowlerit.com/2018/08/azure-ad-hybrid-joined-devices-overview/

Point 3

https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatica...