Automatic Windows 10 PC Enrollment in Microsoft Intune or SCCM

Benoit LecoursIntune, SCCM, WINDOWS 107 Comments

The process of enrolling your Windows 10 computers in Intune should be as simple as possible for your users. If you’re using Azure Active Directory in your organization, the enrollment process can be made automatically when a user joins it’s device to AAD. It couldn’t be simpler. The process is the same rather for Intune Standalone or Hybrid mode (integrated with SCCM)

Windows 10 Intune Automatic Enrollment Prerequisites

  • CNAME DNS Entry created on your domain for automatic name resolution
  • A valid Intune Tenant (Standalone or SCCM Integrated)
  • Azure Active Directory Premium enabled

For this post, we’ll be using a Windows 10 1703 device but the process is the same for Windows 10 1607 and slightly different for older versions but is supported.

CNAME DNS

Follow our Intune Preparation post for the steps to create CNAME entry.

The Azure portal let you test your configuration

  • Open the Azure Portal
  • Go to Intune / Device Enrollment / Windows Enrollment / CNAME Tester

Windows 10 Intune Automatic Enrollment

  • Enter your domain and click on Test
  • Ensure that your test is successful

Windows 10 Intune Automatic Enrollment

Verify Licences

We’ll start by verifying if our Intune and/or Azure Active Directory Premium License are enabled for this task.

  • Open the Azure Portal
  • Go to User and Groups / All Users
  • Select your Global Administrator Account

Windows 10 Intune Automatic Enrollment

  • Select Licenses
  • Select the product linked with your service (In our case EMS E5)

Windows 10 Intune Automatic Enrollment

  • Ensure that your Azure Active Directory Premium and Intune A Direct licenses are ON

Windows 10 Intune Automatic Enrollment

Intune Configuration

We now need to enable Intune to accept automatic MDM enrollment requests.

  • Go to Azure Active Directory
  • Select Mobility (MDM and MAM) / Microsoft Intune

Windows 10 Intune Automatic Enrollment

  • In MDM User Scope, select All or Some
    • All : All Users are enabled to enroll devices
    • Some : Specify a group to limit device enrollment to this group only
  • The 3 MDM link will be automatically filled. Do not change anything and click Save

Windows 10 Intune Automatic Enrollment

We are now ready to automatically enroll a Windows 10 device in our Intune tenant.

Windows 10 Intune Automatic Device Enrollment

We will now test our enrollment procedure using a Windows 10 device.

  • Open the Start menu
  • Click on Settings

Windows 10 Intune Automatic Enrollment

  • Select Accounts / Access work or school / Connect

Windows 10 Intune Automatic EnrollmentWindows 10 Intune Automatic EnrollmentWindows 10 Intune Automatic Enrollment

  • Log in using an account in your domain and then select Next

Windows 10 Intune Automatic Enrollment

  • Enter your password

Windows 10 Intune Automatic Enrollment

  • If everything is set correctly, your device will be joined to Azure Active Directory and automatically enroll in Intune. Click Done

Windows 10 Intune Automatic Enrollment

 

Verification

  • Go back to Settings you’ll see that your account is enable

Windows 10 Intune Automatic Enrollment

  • You can click on the account and validate the enrollment by clicking on Info

Windows 10 Intune Automatic Enrollment

  • You can see your organization name at the top

Windows 10 Intune Automatic Enrollment

If you followed the previous steps, but still fail to connect, see the Microsoft documentation or use the Export your management log file on the right. Consult the log file and refer to the MSDN documentation for the full error code list.

At this time you’ll see your device in the Intune Portal or in the SCCM console depending if you’re using Standalone or hybrid mode.

SCCM :

Windows 10 Intune Automatic Enrollment

Intune :

Windows 10 Intune Automatic Enrollment

Windows 10 Company Portal

The Company Portal app, lets you find and download available and required apps sent by your IT department. If you have the Company Portal app installed you can validate that the enrollment is successful.

If you don’t have the Company Portal installed :

  • Select Start / Store
  • Use Search, type company portal
  • Select Company Portal / Install

Windows 10 Intune Automatic Enrollment

  • Open the Company Portal you’ll see that you’re automatically sign-in and that your device is automatically enrolled

Windows 10 Intune Automatic EnrollmentWindows 10 Intune Automatic Enrollment

 

Share this Post

 

Founder of System Center Dudes. Based in Montreal, Canada, Senior Microsoft SCCM Consultant, 5 times Enterprise Mobility MVP. Working in the industry since 1999. His specialization is designing, deploying and configuring SCCM, mass deployment of Windows operating systems, Office 365 and Intunes deployments.

7 Comments on “Automatic Windows 10 PC Enrollment in Microsoft Intune or SCCM”

  1. Get automatic updates and troubleshooting suggestions by installing HP Support Assistant in your HP computer system. Most of the computers are coming with this in-built utility, if you don’t have this application, you can download it from HP official site. You have the option to enable and disable the HP support assistant to take the control on it.

  2. Hello, NEED HELP 🙁

    We have few of the Windows 10 machines in our environment connected to Azure AD and we do use intunes.
    Recently most of the users are experiencing issues while turning ON their devices, they are prompted for creating a new PIN.

    When they try to enter the PIN, the device starts to rest.. I know this is strange but happened with 8 users so far, so cant be a coincidence.

    Any leads on this would be helpful

  3. This is very significant, and yet necessary towards just click this unique backlink: Floor standing sign, Hey friends, this is Maria Carter from the U.S.A. I was born and brought in the u.s.a and working in a HP Printer techsupport organization as a technical support U.S.A manager. We are providing third party HP Support by our toll-free HP Printer Support +1-888-902-8333

  4. There are various sections to help the users who have the Windows 10 operating system. The sections include the intune activities which will help them to modify the settings on their system.

Leave a Reply

Your email address will not be published. Required fields are marked *