Enrollment method

Copper Contributor

Hi,

We have list of around 100 users that needs to be enrolled in Intune.

They are currently registered in Azure but not managed via MDM

Which enrollment method would be best ?

1. Autopilot - If Autopilot then we would need to take backup of the device, import hash key and then then do complete reset to enroll ?

2. Bulk Enrollment method

3. Enrollment via Access work or School

1 Reply

It depends on what type of join you’re using:

1. Hybrid AAD Join: I would go gpo.
https://cloudbymoe.com/f/enrolling-workstations-to-intune-using-gpo

2. Azure Ad Join Devices: I would enable Auto Enrollment and devices would enroll automatically.
https://learn.microsoft.com/en-au/mem/intune/enrollment/windows-enroll#enable-windows-10-automatic-e...

3. Azure AD Registered: These are the annoying ones, you can do one of the options:

 

- Join Azure AD and enroll to Intune using Automatic Enrollment.

https://learn.microsoft.com/en-au/mem/intune/enrollment/windows-enroll#enable-windows-10-automatic-e...

https://tamilkovan.com/2021/02/13/windows-10-intune-enrollment-azure-ad-joined-azure-ad-registration...

 

- Enroll the device to On-Prem Domain - Sync them to be Hybrid - Then Apply GPO to enroll in Intune. 

https://cloudbymoe.com/f/enrolling-workstations-to-intune-using-gpo

 

- Use Autopilot with hashes as you suggested or Bulk enrollment, both ways need backup because you’re reseting the devices to OOBE.


Use Autopilot for all new devices of course. Bulk Enrollment is great way to enroll large number of devices but you still need to use OOBE. I would not recommend enrolling manually to Intune using Work or School Account. 

Hope this helps!
Moe