Forum Discussion

DanielNguyen's avatar
DanielNguyen
Copper Contributor
Jun 08, 2020
Solved

Intune License for Device Enrollment Manager accounts

Hi all,   I am new to Intune and was assigned to a project to enroll all company Windows desktop to Intune. I would like to assign myself as a DEM and start the enrollment.   What I am not sure h...
Conditional Access
Intune
mobile device management (mdm)
  • alschneiter's avatar
    alschneiter
    Jun 08, 2020

    DanielNguyen 

    Hi,

     

    A good practice would be to create a dedicated user and assign an Intune license to this user. Then assign the Device Enrollment Role to it. This allows you to enroll up to 1000 devices.

    If you have Azure AD Joined devices, they are already enrolled in Intune (Endpoint Manager). You maybe need to configure the proper settings first (Autoenrollment, DNS). But it requires Azure AD P1.

    Also have a look at the device enrollment restriction policies. They do not apply to Device Enrollment Managers for Windows:

    https://docs.microsoft.com/en-us/mem/intune/enrollment/enrollment-restrictions-set#create-a-device-limit-restriction

     

    Each user who is using Intune (Apps, Profiles, Policies, etc) needs a license.

    If you have shared devices, Kiosk or Signage for example, you can use "Intune Device-only" licenses. This licenses do not need to be assigned to any device or user.

    https://techcommunity.microsoft.com/t5/microsoft-endpoint-manager-blog/microsoft-intune-announces-device-only-subscription-for-shared/ba-p/280817

     

    Hope this helps,

    Cheers,

    Al

     

DanielNguyen's avatar
DanielNguyen
Copper Contributor
Jun 11, 2020

alschneiter 

 

Thanks for the detail information you have shared.

 

I would bring up this scenario and hope you or anyone has time to help me out. 

 

Let's say I have two workstations to be shared by 5 other users, I will do the following step:

  1. Assign one user as a DEM.
  2. Assign him/her with "Microsoft Intune Device" License (2$/license/month). 
  3. Purchase two more licenses for those two workstations and won't assign to any users or group of devices.

Questions:

  1. Will the setting work?
  2. Can the device considered as a shared device or extra configuration required?
  3. Can Intune policy apply to other users when they login to those two workstations?

Thanks for anything that you can help.

 

Kind regards,

DanielNguyen's avatar
DanielNguyen
Copper Contributor
Jun 17, 2020

Hi all,

 

I would share my experience with Intune Device License that as describe in this link (https://support.microsoft.com/en-au/help/4514392/introduction-to-device-licenses-in-microsoft-intune) I used DEM account to enroll the machine and it will automatically be assigned a device license but we need to manually monitor the number of licenses to make sure enrolled devices are fit within the purchased licenses.

 

I talked to Intune support team and they advised that Intune user-based profiles won't work on users who login these machine and it is correct. I tested with two users, one with valid user license and one without a license, all policies applied to the one with valid license but not the other one).

 

I will close this discussion but anyone has similar issues are welcome to contact me to discuss.

 

Kind regards,

Resources