Automatic Windows 10 PC Enrollment in Microsoft Intune or SCCM

Benoit LecoursIntune, SCCM, WINDOWS 1025 Comments

The process of enrolling your Windows 10 computers in Intune should be as simple as possible for your users. If you’re using Azure Active Directory in your organization, the enrollment process can be made automatically when a user joins it’s device to AAD. It couldn’t be simpler. The process is the same rather for Intune Standalone or Hybrid mode (integrated with SCCM)

Windows 10 Intune Automatic Enrollment Prerequisites

  • CNAME DNS Entry created on your domain for automatic name resolution
  • A valid Intune Tenant (Standalone or SCCM Integrated)
  • Azure Active Directory Premium enabled

For this post, we’ll be using a Windows 10 1703 device but the process is the same for Windows 10 1607 and slightly different for older versions but is supported.

CNAME DNS

Follow our Intune Preparation post for the steps to create CNAME entry.

The Azure portal let you test your configuration

  • Open the Azure Portal
  • Go to Intune / Device Enrollment / Windows Enrollment / CNAME Tester

Windows 10 Intune Automatic Enrollment

  • Enter your domain and click on Test
  • Ensure that your test is successful

Windows 10 Intune Automatic Enrollment

Verify Licences

We’ll start by verifying if our Intune and/or Azure Active Directory Premium License are enabled for this task.

  • Open the Azure Portal
  • Go to User and Groups / All Users
  • Select your Global Administrator Account

Windows 10 Intune Automatic Enrollment

  • Select Licenses
  • Select the product linked with your service (In our case EMS E5)

Windows 10 Intune Automatic Enrollment

  • Ensure that your Azure Active Directory Premium and Intune A Direct licenses are ON

Windows 10 Intune Automatic Enrollment

Intune Configuration

We now need to enable Intune to accept automatic MDM enrollment requests.

  • Go to Azure Active Directory
  • Select Mobility (MDM and MAM) / Microsoft Intune

Windows 10 Intune Automatic Enrollment

  • In MDM User Scope, select All or Some
    • All : All Users are enabled to enroll devices
    • Some : Specify a group to limit device enrollment to this group only
  • The 3 MDM link will be automatically filled. Do not change anything and click Save

Windows 10 Intune Automatic Enrollment

We are now ready to automatically enroll a Windows 10 device in our Intune tenant.

Windows 10 Intune Automatic Device Enrollment

We will now test our enrollment procedure using a Windows 10 device.

  • Open the Start menu
  • Click on Settings

Windows 10 Intune Automatic Enrollment

  • Select Accounts / Access work or school / Connect

Windows 10 Intune Automatic EnrollmentWindows 10 Intune Automatic EnrollmentWindows 10 Intune Automatic Enrollment

  • Log in using an account in your domain and then select Next

Windows 10 Intune Automatic Enrollment

  • Enter your password

Windows 10 Intune Automatic Enrollment

  • If everything is set correctly, your device will be joined to Azure Active Directory and automatically enroll in Intune. Click Done

Windows 10 Intune Automatic Enrollment

 

Verification

  • Go back to Settings you’ll see that your account is enable

Windows 10 Intune Automatic Enrollment

  • You can click on the account and validate the enrollment by clicking on Info

Windows 10 Intune Automatic Enrollment

  • You can see your organization name at the top

Windows 10 Intune Automatic Enrollment

If you followed the previous steps, but still fail to connect, see the Microsoft documentation or use the Export your management log file on the right. Consult the log file and refer to the MSDN documentation for the full error code list.

At this time you’ll see your device in the Intune Portal or in the SCCM console depending if you’re using Standalone or hybrid mode.

SCCM :

Windows 10 Intune Automatic Enrollment

Intune :

Windows 10 Intune Automatic Enrollment

Windows 10 Company Portal

The Company Portal app, lets you find and download available and required apps sent by your IT department. If you have the Company Portal app installed you can validate that the enrollment is successful.

If you don’t have the Company Portal installed :

  • Select Start / Store
  • Use Search, type company portal
  • Select Company Portal / Install

Windows 10 Intune Automatic Enrollment

  • Open the Company Portal you’ll see that you’re automatically sign-in and that your device is automatically enrolled

Windows 10 Intune Automatic EnrollmentWindows 10 Intune Automatic Enrollment

 

Share this Post

 

25 Comments on “Automatic Windows 10 PC Enrollment in Microsoft Intune or SCCM”

  1. All the latest device and mobile OS have the built-in Mail app or Yahoo Mail app to access your Yahoo Mail account. You have complete access of all the features of your Yahoo Mail account with it. You can change or update your Yahoo Mail account directly from Yahoo mail app. This is easy with these easy steps; Menu icon > Manage Accounts > Account info > Security settings > Enter security code > Change password > I would rather change my password > Enter the new password > Confirmation > Continue; that’s all.

  2. Enable or Disable Windows Error Reporting in Windows 10. Windows Error Reporting (WER) is a flexible event-based feedback infrastructure designed to gather information about the hardware and software problems that Windows can detect, report the information to Microsoft, and provide users with any available solutions.

  3. The e-Visa India application service is a program that allows travelers willing to travel to India to apply for their Visas online and at their comfort. Currently, thousands of travelers from more than 160 countries can apply for any e-Visa India or eTourist visa category based on the purpose of their visit and travel to India without having to visit embassies to get their Indian visa. Indian e visa
    Indian visa
    apply Indian e visa
    indianvisa.online
    indianvisa
    Apply Indian e visa
    Indian online e visa

  4. Windows 10 operating system slightly different because i am still using window seven but now i have install window 10. Thanks for sharing this info. with us.

  5. To use VNC, install it on both the PCs you want to connect and then set them to listening. To control another PC, simply open the VNC viewer (client), enter thePC’s IP address, and have at it. You may also have to open port 5900 on your firewall and router, and to direct said port to the PC you want to control.

  6. You just need is to keep up the printer with Regular adjust and cleaning the parts for adaptable execution. What’s more, for that reason we are serving the best hp printer Support Number clients and constantly accessible When ever clients stall out with a few issues which intrude on their work of prints. Our Support for HP Printer support give the clients standard adjusting offers .for more visit site: https://www.hpcustomerhelpnumber.com/

  7. Hello! This is my first visit to your blog! This is my first comment here, so I just wanted to give a quick shout out and say I genuinely enjoy reading your articles. Your blog provided us useful information. You have done an outstanding job.
    Ultimate Odyssey Travel Joint Stock Company is a professional company possessing extensive knowledge, expertise and resources, specializing in the design and implementation of Vietnam Package Tours and Indochina Package Tours.

  8. Get automatic updates and troubleshooting suggestions by installing HP Support Assistant in your HP computer system. Most of the computers are coming with this in-built utility, if you don’t have this application, you can download it from HP official site. You have the option to enable and disable the HP support assistant to take the control on it.

  9. Hello, NEED HELP 🙁

    We have few of the Windows 10 machines in our environment connected to Azure AD and we do use intunes.
    Recently most of the users are experiencing issues while turning ON their devices, they are prompted for creating a new PIN.

    When they try to enter the PIN, the device starts to rest.. I know this is strange but happened with 8 users so far, so cant be a coincidence.

    Any leads on this would be helpful

  10. This is very significant, and yet necessary towards just click this unique backlink: Floor standing sign, Hey friends, this is Maria Carter from the U.S.A. I was born and brought in the u.s.a and working in a HP Printer techsupport organization as a technical support U.S.A manager. We are providing third party HP Support by our toll-free HP Printer Support +1-888-902-8333

  11. There are various sections to help the users who have the Windows 10 operating system. The sections include the intune activities which will help them to modify the settings on their system.

Leave a Reply

Your email address will not be published. Required fields are marked *