SOLVED

Surface Hub - Azure AD automated enrollment

%3CLINGO-SUB%20id%3D%22lingo-sub-364144%22%20slang%3D%22en-US%22%3ESurface%20Hub%20-%20Azure%20AD%20automated%20enrollment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-364144%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3Ethere%20are%20several%20option%20how%20i%20can%20join%20a%20surface%20hub%20to%20AAD%20(Cloud%20Only%20Customer)%20%26amp%3B%20Intune.%26nbsp%3B%3C%2FP%3E%3CP%3EThese%20are%3A%3C%2FP%3E%3CP%3E%3CSTRONG%3EOOBE%3A%20%3C%2FSTRONG%3EOut%20of%20the%20Box%20Experience%20and%20Domain%20Join%20via%20First%20Run%20Program%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface-hub%2Ffirst-run-program-surface-hub%23a-href-idsetup-adminsaset-up-admins-for-this-device-page%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface-hub%2Ffirst-run-program-surface-hub%23a-href-idsetup-adminsaset-up-admins-for-this-device-page%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3EIntune%20Bulk%20Enrollments%3A%3C%2FSTRONG%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fblogs.technet.microsoft.com%2Fsenthilkumar%2F2018%2F06%2F05%2Fintune-bulk-enroll-surface-hubs-to-microsoft-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.technet.microsoft.com%2Fsenthilkumar%2F2018%2F06%2F05%2Fintune-bulk-enroll-surface-hubs-to-microsoft-intune%2F%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%C2%B4m%20looking%20for%20an%20high%20automated%20solution%20to%20deploy%20and%20manage%20the%20devices%20with%20no%20or%20minimal%20manual%20steps.%20As%20mentioned%20in%20this%20article%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface%2Fwindows-autopilot-and-surface-devices%23surface-device-support%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface%2Fwindows-autopilot-and-surface-devices%23surface-device-support%3C%2FA%3E%3C%2FP%3E%3CP%3E%3CSTRONG%3EAutpilot%26nbsp%3B%3C%2FSTRONG%3Eis%20not%20a%20supported%20option%2C%20but%3C%2FP%3E%3CP%3E%3CSTRONG%3EAutomatic%20enrollment%20via%20AAD%20join%3A%3C%2FSTRONG%3E%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface-hub%2Fmanage-settings-with-mdm-for-surface-hub%23automatic-enrollment-via-azure-active-directory-join%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsurface-hub%2Fmanage-settings-with-mdm-for-surface-hub%23automatic-enrollment-via-azure-active-directory-join%3C%2FA%3E%3C%2FP%3E%3CP%3Eshould%20be%20possible.%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20to%20use%20this%20automatic%20enrollment%3F%20Are%20there%20any%20Surface%20Hub%20specific%20docs%20%2F%20videos%20how%20this%20option%20can%20be%20used%20to%20get%20this%20devices%20managed%20by%20intune%3F%3C%2FP%3E%3CP%3ERegards%3C%2FP%3E%3CP%3EJakob%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-369989%22%20slang%3D%22en-US%22%3ERe%3A%20Surface%20Hub%20-%20Azure%20AD%20automated%20enrollment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-369989%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F203278%22%20target%3D%22_blank%22%3E%40Jakob%20Schaefer%3C%2FA%3E%2C%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20use%20the%20Windows%20Configuration%20Designer%20to%20create%20a%20PPKG%20file%20that%20will%20automatically%20name%20the%20Surface%20Hub%20and%20join%20in%20to%20your%20Azure%20AD%20tenant.%3C%2FP%3E%0A%3CP%3EIf%20you%20have%20Intune%20Autoenrollment%20enabled%2C%20the%20Surface%20Hub%20will%20register%20itself%20in%20Intune%20during%20OOBE%20as%20part%20of%20the%20Azure%20AD%20join%20process.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESo%20basically%20all%20you'll%20need%20is%20a%20USB%20stick%20with%20the%20PPKG%20file%20and%20the%20CSV%20file%20to%20choose%20the%20device%20names%20from.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi,

there are several option how i can join a surface hub to AAD (Cloud Only Customer) & Intune. 

These are:

OOBE: Out of the Box Experience and Domain Join via First Run Program:

https://docs.microsoft.com/en-us/surface-hub/first-run-program-surface-hub#a-href-idsetup-adminsaset...

Intune Bulk Enrollments: https://blogs.technet.microsoft.com/senthilkumar/2018/06/05/intune-bulk-enroll-surface-hubs-to-micro...

 

I´m looking for an high automated solution to deploy and manage the devices with no or minimal manual steps. As mentioned in this article:

https://docs.microsoft.com/en-us/surface/windows-autopilot-and-surface-devices#surface-device-suppor...

Autpilot is not a supported option, but

Automatic enrollment via AAD join: https://docs.microsoft.com/en-us/surface-hub/manage-settings-with-mdm-for-surface-hub#automatic-enro...

should be possible. 

How to use this automatic enrollment? Are there any Surface Hub specific docs / videos how this option can be used to get this devices managed by intune?

Regards

Jakob

1 Reply
Highlighted
Solution

Hi @Jakob Schaefer

You can use the Windows Configuration Designer to create a PPKG file that will automatically name the Surface Hub and join in to your Azure AD tenant.

If you have Intune Autoenrollment enabled, the Surface Hub will register itself in Intune during OOBE as part of the Azure AD join process.

 

So basically all you'll need is a USB stick with the PPKG file and the CSV file to choose the device names from.