May 08 2019 08:17 AM
Hi all,
We have Intune and Automatic enrolment for Windows 10 devices. They're joined to our on premise AD domain and hybrid joined to Azure AD.
The issue is that the Helpdesk guys end up being the registered owner and the enrolled by owner for these devices rather than the user.
Can someone let me know how we can stop this? Is it just a case of logging in the intended user first and letting it sync? Do we have to connect the user to Azured AD from the Accounts page in Settings?
We
May 08 2019 12:34 PM
@David Gorman normally with intune on AAD only the first user account that connects to intune is made the device owner. we have a mix of clients that either have all devices registered under one account (not ideal for most) or more commonly log on as the device primary user during device setup. havent played with automatic enrolment for hybrid devices but i would assume the logic would be the same that the login account that is connecting to Intune will be made the owener of the device....
Automatic redeployment and logging in as the primary user will update the device owner, not sure what issues this would cause with the on-prem account and you may have issues with applications needing re-install
Steve:)
May 08 2019 01:25 PM
@SteveMacNZ_Old this is helpful, thanks, I'm following this thread for my own use; can you clarify how automatic redeployment works? Is this a retire/wipe/delete of the device, or something else?
It would be lovely if we could just reassign the device to a different user like you could in old Intune, but until then - I found it hard to find a definitive 'best practice' for how to do this.
May 08 2019 02:26 PM
@Dev Lunsford yes it would be great to be able to change the owner via the device management UI.
https://docs.microsoft.com/en-us/education/windows/autopilot-reset and https://osddeployment.dk/2018/05/20/how-to-deploy-windows-10-automatic-redeployment-with-intune/ for more information
May 09 2019 01:58 AM
Thanks all. While I understand the issues around assigning the device to a different person, this is for the setup initially.
Would it be best to stop Windows 10 auto enrolling (from Group Policy) and making it manual
May 09 2019 03:07 AM
@David Gorman sorry to hijack your thread :) I thought it was the same question I had but I see it was a little different.
Dev