Forum Discussion
Intune License for Device Enrollment Manager accounts
- Jun 08, 2020
Hi,
A good practice would be to create a dedicated user and assign an Intune license to this user. Then assign the Device Enrollment Role to it. This allows you to enroll up to 1000 devices.
If you have Azure AD Joined devices, they are already enrolled in Intune (Endpoint Manager). You maybe need to configure the proper settings first (Autoenrollment, DNS). But it requires Azure AD P1.
Also have a look at the device enrollment restriction policies. They do not apply to Device Enrollment Managers for Windows:
Each user who is using Intune (Apps, Profiles, Policies, etc) needs a license.
If you have shared devices, Kiosk or Signage for example, you can use "Intune Device-only" licenses. This licenses do not need to be assigned to any device or user.
Hope this helps,
Cheers,
Al
Hi,
A good practice would be to create a dedicated user and assign an Intune license to this user. Then assign the Device Enrollment Role to it. This allows you to enroll up to 1000 devices.
If you have Azure AD Joined devices, they are already enrolled in Intune (Endpoint Manager). You maybe need to configure the proper settings first (Autoenrollment, DNS). But it requires Azure AD P1.
Also have a look at the device enrollment restriction policies. They do not apply to Device Enrollment Managers for Windows:
Each user who is using Intune (Apps, Profiles, Policies, etc) needs a license.
If you have shared devices, Kiosk or Signage for example, you can use "Intune Device-only" licenses. This licenses do not need to be assigned to any device or user.
Hope this helps,
Cheers,
Al
alschneiter does device need be logged in using the DEM account after the enrollment or can it the local admin stay logged in? I am testing a scenario where I am using DEM just for the enrollment and management of device, but not switch user. This is to accommodate for an already running kisosk based application on the device. However, my concern here is that this may break the update rings as the enrolling user will never log in on the device.