I'm Mahesh Unnikrishnan, the PM responsible for integrating mobile device management (MDM) solutions such as Microsoft Intune with Azure AD. In a previous blog post , we discussed how we're enabling automatic MDM enrollment of both corporate owned as well as personally owned Windows 10 devices. Since then, it's been an exciting few weeks for us, culminating in last week's launch of Windows 10. We are excited to announce that the Azure AD configuration experience to enable automatic MDM enrollment with Microsoft Intune is now generally available. In this post, we walk through how you can configure this feature in Azure AD.
Click on the 'Applications' tab and you should see Microsoft Intune in the list of applications. Note that if you do not have an Azure AD Premium subscription or do not have a Microsoft Intune subscription you will not see Microsoft Intune in the list of applications.
Click on the arrow and you should see a page that enables you to configure Microsoft Intune.
Click the 'Configure' button to start configuring automatic MDM enrollment with Microsoft Intune. On the Configure tab of this page, you can see a couple of URLs for Intune:
You do not need to change any of these URLs. They are automatically configured for your Azure AD tenant.
On scrolling down further, you will notice a setting that lets you specify which users' devices should be managed by Microsoft Intune. These users' Windows 10 devices will be automatically enrolled for management with Microsoft Intune.
The simplest option is to specify that all users' Windows 10 devices be managed by Microsoft Intune. However, you also have the flexibility to specify whether only users belonging to a specific set of groups should have their devices managed by Microsoft Intune. This is useful for performing phased rollouts of the feature in your organization. You can start off with a few groups and subsequently roll out the deployment more broadly in your organization.
To roll out automatic MDM enrollment with Microsoft Intune to only a select group of users, slide the toggle to 'Groups'.
When you click the 'Select Groups' button, you should see a group picker with the ability to specify groups this capability should be rolled out to.
That's it! When you're done, hit 'Save' and automatic MDM enrollment with Microsoft Intune will be enabled for both corporate owned and personally owned devices that are joined to Azure AD.
Please give automatic MDM enrollment a try and send us your questions and feedback. Keep watching this space to learn more about the cool features we're building in Windows 10 and Azure AD as we continue this blog series.
As always we look forward to and welcome your feedback.
Senior Program Manager
Microsoft Identity and Security Services Division
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.