SOLVED

Intune Automatic Enrollment settings

%3CLINGO-SUB%20id%3D%22lingo-sub-1889775%22%20slang%3D%22en-US%22%3EIntune%20Automatic%20Enrollment%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1889775%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EOn%20Intune%20Automatic%20Enrollment%20settings%20page%20have%20some%20URL%2C%20in%20what%20situation%20this%20URL%20need%20to%20modify%3F%20or%20just%20leave%20them%20default%20value%3F%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202020-11-16%20165649.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F233705i57C841EE15C99525%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202020-11-16%20165649.png%22%20alt%3D%22%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202020-11-16%20165649.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1889775%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1892137%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Automatic%20Enrollment%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1892137%22%20slang%3D%22en-US%22%3E%3CP%3EHey%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F326868%22%20target%3D%22_blank%22%3E%40TAMSHUI%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ethe%20MDM%20user%20scope%20is%20for%20Windows%2010%20Automatic%20Enrollment.%20So%2C%20if%20a%20device%20is%20doing%20OOBE%20(initial%20install)%20and%20for%20example%20Azure%20AD%20Join%20(AADJ)%20or%20Hybrid%20Join%2C%20it%20will%20normally%20not%20join%20your%20MDM%2C%20the%20first%20MDM%20user%20scope%20will%20tell%20the%20system%20to%20automatically%20enroll%20into%20MDM.%20In%20the%20default%20setting%2C%20the%20URLs%20already%20set%2C%20it%20will%20use%20the%20Intune%20URLs%20for%20the%20MDM%20enrollment.%20If%20you%20want%20another%20MDM%20system%20to%20take%20care%20of%20of%20this%2C%20like%20Airwatch%2C%20you%20have%20to%20put%20the%20Airwatch%20URL%20in%20there.%3C%2FP%3E%0A%3CP%3EThe%20MAM%20user%20scope%20is%20for%20Windows%20Information%20Protection%20(WIP).%20This%20is%20Mobile%20Application%20Management%20for%20Windows%2010.%20You%20can%20read%20more%20about%20it%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Finformation-protection%2Fwindows-information-protection%2Fprotect-enterprise-data-using-wip%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EProtect%20your%20enterprise%20data%20using%20Windows%20Information%20Protection%20(WIP)%20(Windows%2010)%20-%20Microsoft%20365%20Security%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20want%20Intune%20managed%20Windows%2010%20devices%20you%20typically%20need%20the%20MDM%20user%20scope%20not%20the%20MAM%20user%20scope.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1893124%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Automatic%20Enrollment%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1893124%22%20slang%3D%22en-US%22%3Ethanks%20Oliver.%20means%20if%20I%20select%20MDM%2FMAM%20user%20scope%20to%20some%20or%20all%2C%20the%20auto-enroll%20will%20be%20enable.%20And%20about%20MAM%2FMDM%20URL%2C%20if%20we%20prefer%20to%20use%20Intune%20as%20my%20MDM%2FMAM%20solution%2C%20just%20leave%20those%20URL%20default.%20But%20if%20we%20want%20to%20use%20third-party%20MDM%2FMAM%20solution%20third-party%20will%20provide%20we%20a%20new%20URL%20to%20replace%20those%20default%20URL.%20is%20correct%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1893588%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20Automatic%20Enrollment%20settings%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1893588%22%20slang%3D%22en-US%22%3E%3CP%3EYes%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F326868%22%20target%3D%22_blank%22%3E%40TAMSHUI%3C%2FA%3E%26nbsp%3Bthat's%20correct.%20Here%20also%20the%20official%20docs%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fenrollment%2Fwindows-enroll%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESet%20up%20enrollment%20for%20Windows%20devices%20by%20using%20Microsoft%20Intune%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

On Intune Automatic Enrollment settings page have some URL, in what situation this URL need to modify? or just leave them default value? 

 

屏幕截图 2020-11-16 165649.png

3 Replies
best response confirmed by TAMSHUI (Occasional Contributor)
Solution

Hey @TAMSHUI,

 

the MDM user scope is for Windows 10 Automatic Enrollment. So, if a device is doing OOBE (initial install) and for example Azure AD Join (AADJ) or Hybrid Join, it will normally not join your MDM, the first MDM user scope will tell the system to automatically enroll into MDM. In the default setting, the URLs already set, it will use the Intune URLs for the MDM enrollment. If you want another MDM system to take care of of this, like Airwatch, you have to put the Airwatch URL in there.

The MAM user scope is for Windows Information Protection (WIP). This is Mobile Application Management for Windows 10. You can read more about it here: Protect your enterprise data using Windows Information Protection (WIP) (Windows 10) - Microsoft 365...

 

If you want Intune managed Windows 10 devices you typically need the MDM user scope not the MAM user scope.

 

best,

Oliver

thanks Oliver. means if I select MDM/MAM user scope to some or all, the auto-enroll will be enable. And about MAM/MDM URL, if we prefer to use Intune as my MDM/MAM solution, just leave those URL default. But if we want to use third-party MDM/MAM solution third-party will provide we a new URL to replace those default URL. is correct?