Bulk enrollment of Windows 10 / 11 Device in Microsoft Intune using Windows configuration Designer

now let's check how we can enroll a device using bulk enrollment method so right now I am on my client machine the very first thing we need to do is to create a package using Windows configuration designer so I am going to log into the Microsoft store for business app and then I'm typing configuration Windows configuration designer app okay now I can see Windows configuration designer app okay Windows configuration designer have without Imaging used to use the windows configuration designer app to simplify deployment of Windows device at your organization wcd allow configuration of many aspects of Windows device settings including Azure active directory okay I am going to install it now in my machine Windows configuration designer app is now installed let me open it Windows configuration designer app and we'll start creating a package for bulk enrollment okay now sure no not from now Windows configuration app is now loaded and I am going to create a previous link package for desktop devices we can also create a provisioning package for kiosk devices surface of devices Polo lens devices Windows mobile devices and some Advanced configuration provisioning we can create for now I am going to create a provisioning desktop package I'm going to click here now I am going to give a name I'm going to give a bulk a bulk enrolled okay I'm going to change the path the path of this okay under desktop okay under desktop I'm going to create a new folder and just create it so this is the path of where the package binaries will be stored I'm going to click finish it's now loading and then now it's loading now I have a step to perform the very first step in each wire computation designer then we can we first step in Windows configuration designer is to set up is to set up the device name okay so there are two options I can I can go with serial number or with some prefix or I can use some random numbers for now I'm I'm going to click run copy random number okay okay paste it here instead of this bulk bulk demo but demo randomly 5 so when what will happen when machine is receiving this package and then machine is going to rename their uh going to rename the device uh with prefixed demo and then randomly five number okay I can provide the product key also but I don't know I don't have that I'm not I'm going to provide here I can configure device in a shared I mean convert device for shared use I can yes or no but I don't want to do this I can remove the pre-installed app by just moving the slider for now I'm okay with this then I'm going to configure our Network I remote to configure anything in this way I'm just switching it off then I'm in the account management page we have multiple options we need to provide and only we I mean we need to enroll the device in active directory or in Azure active directive local admin with local admin right so I am going to click on enter and enter the enroll the device in Azure ID and the ball token expiry is this I mean 180 days and then I'm going to create a generatable token so for that what I need to do I need to sign up with any of the account who has a privilege access like into an administrator Global administrator and password administrator and then I think cloud and device administrator I'm going to give password see it sender okay M lab one two soft on microsoft.com okay okay foreign Microsoft [Music] okay now I'm going to add the password [Music] okay password now it's saying this stay to my donation to manage the device I don't want to select this no more I don't want to sign up and just click ok now it's going to generate a token and with the help of that token I can I mean the package can register the enroll the device in into bulk token is successfully generated additionally I can create a local admin so I'm going to create a bulk admin and then I'm with your password now uh I can I can do some other steps like I can add some applications if you want to deploy an application I can add application let's let's add one application to show you how we can add an application let me add I'm just going to download simple application download MDT I'm going to download Microsoft deployment toolkit package okay um just downloading Microsoft deployment toolkit package 64-bit and then click next it's going to download [Music] okay now it's downloaded is started okay my remote install now no cancel it yes okay now what you need to do I just need to add here I'm going to provide the package and name application name and then I'm just going to give the path where I downloaded this application and it's automatically going to populate the command line okay and uh additionally where we can configure if there is something goes wrong during installation and do we need to continue it or we're going to stop it okay so for now I am going to switch it off okay additionally we can allow uh restart okay if you want to restart you can enable it otherwise that's okay and then if there is any dependency for that application you can add here also and then click add now your application is now added so I have added one application I don't have any certificate for it but if you want to add pad you just need to provide the certificate name browse the path and then add it that's it I don't know I have any software right now so I'm not going to add anything then I'll click finish it's going to provide me the summary of this page and my local admin name is this with the password uh add application and then okay the important Point protect your package okay if I'm not going to enable it so anyone can run this package and enroll the device and in tune so I want to give a password okay I'm going to provide a password so if someone is trying to install this they need to enter the password to install that package I'm going to create it okay notes creating nodes done package is created and is stored in the uh the created folder which we created earlier in the downed X desktop page under this we have a folder called bulk enrollment okay now I am going to show you how to okay I'm going to close it now for now the this application is no more needed for package is ready and I'm going to use the same machine for enrollment okay now let me show you few things before I'm going to install it in the connect I don't have anything the important point is that if you read a portal portal Dot seo.com [Music] and if I'm going to log in with my uh admin account there I want to show you that when you're creating a creating this package then it's going to create a user and that user is actually going to enroll the device under [Music] application of azure directory and then if you go to users I'm going to open my endpoint portal also it means enter portal and open this one also so that still loading okay now user is there okay let me show you the user new user created when we created this package it will loading okay yeah so I'm talking about this user package underscore some randomly ID package okay this user is actually uh is going to enroll the device okay this is the user who's going to enroller device and when we are known enrolling a device using bulk enrollment method via package then we'll see the same thing in registry also okay so that's what I want to show you and another thing is that I want to show you is other devices let's see if I have anything okay exploding meanwhile I am going to show you the device here in this InTune admin Center portal let me open meanwhile in tune portal also under all devices yeah okay I have one device okay and but that is not the dip that device okay we should be good I mean that's okay now what I'm going to do uh I'm going to enroll this I'm going to run this package I'm going to click it and then oh before that one more thing I want to show you that under cool am access and then under access work or school this option add or remove approaching package I don't have anything here now I am going to run this and it should ask me for the bar okay now he's asking password that's a security we added in this package I'm going to provide the password and now this package is going to enroll okay it's in this package from a source you trust FES then click yes and edit okay it's going to enroll now it's done we'll see that this package is showing here okay it's saying that you are about to sign out that's okay meanwhile you see that the package is added here and if we go back to quickly very quickly if you go back to here I don't have anything right now so one one submission we rebooted I'll see something uh under connect okay is let's see if just waiting for machine to reboot by themselves here let me reboot the machine and we'll come back to show you restart now my machine is back let's see if the machine is enrolled in in tune or not I'm going to again connect I'm going to access work or school oh now we can see that this machine is connected to self which is my company name okay and is connected by the package ID okay and I have info button and I had this disconnect button I can run action okay I'm just going to sync it so that all the end is really populated in in tune as well as as you already okay before that let's check the registry also to see who enrolled this device okay now I'm going to hklm and do open hqlm software Microsoft and then this is the Call Registry board enrollment s enrollments and we have multiple G white is here in the relevant one we need to find okay I think this one is already one one and yes this one is the alien one is showing that uh this machine is enrolled by this package ID okay at the red view okay and let's check that in MMC also whether I'm getting any certificate not I'm going to add us I'm going to add certificates I'm going to add user certificate and I'm going to add a computer account let's see if I have anything here or not I don't have anything in here let me see if I have an intermitted so see yeah I have a certificate issue to issue to in in tune MDM device CA and issued by micros Microsoft intuned root certificate okay so I have a certificate and then uh let's see if I have for anything from machine uh yeah I have a certificate here also and I have both certificate Microsoft Internet certificate issue to my issue to my InTune device ID and this is Ms organization uh access certificate issued to my Azure active directory uh device ID okay looks good and now let's open admin Center portal you will see that whether the device is populating here or not okay meanwhile I'm going to open the portal.lco.com also okay under InTune all devices let's see if I have a machine this machine is a rule in InTune or not it should because we are getting info button in under connect okay still not showing here let's give a couple of minute yeah now it's it's showing and the interesting part is that this demo zero seven five four three the the device name needs to be configured right the prefix system demo and then randomly five number is there okay and this is managed by in this one and let me add two more column in this report and we'll show you that whether what is the status a H I'm going to add Azure already registered and join type okay now it should should be as already register joined not registered and MDM enroll MDM Android yes okay I'm going to check one more thing in Azure ID directory and then and then user or even I can check from here also I'm going to users okay under Azure I'm going to click on users it's loading meanwhile we added a package uh MDD package let's see if that package is installed or not I didn't remove program and okay not this one if it starts CPL [Music] okay yes the Microsoft deployment toolkit is automatically installed so it means that application is also installed properly our package is working I just want to show you one more thing under this package the person who enrolls the device do we have any device associated with that or not under devices let's see if the device name is populating here or not so we can see that the person who enrolling the device under devices we are able to see that the demo zero seven five four three is associated with this device and based on that intuner Azure Services going to calculate the number of devices enrolled by this user once the device limit reaches to 1000 then is not allowed to handle any further devices device I mean you unroll that device then just need to go to all devices or even click on that device and then just need to click on delete that device is automatically going to enroll the device let me show you that also okay access cooler work right now I'm connected and I am going to initiate the device command called delete command on that machine let's see what is going to do with this machine idle it should remove that machine from InTune as well as this revoke that certificate and then we should not see anything here under in between below below connect option okay let me delete this I'm going to click yes okay now in a minute or two we'll see that uh will let me clear all this clear notification so now you can see that self has removed your web workplace account and detected all the informations and now if I'm going to show you here just going to refresh it and go back my access is not revoked again I'm not connected to Azure ID as well as not registered in InTune and after some time this entry whatever is there is still deleting and then after some time you'll see that this is not no more in this console that's all I want to show you with respect to device enrollment via bulk enrollment method

Channel: @Chander Mani Pandey

Views: 8,514

Keywords: Bulk enrollment, Bulk enrollment of Windows 10/ 11 Device to Intune, Bulk enrollment in Azure AD and Intune, Intune Windows Device Enrollment, Bulk Enrollment of device using Windows configuration Designer, Bulk enrollment for Windows 10 devices, Windows 10 Bulk Enrollment, intune bulk enrollment Device name, windows configuration designer, Windows Config Designer, wcd windows, bulk enrollment intune, enroll device in intune using bulk enroll, Intune Provisioning Packages, ppkg

Id: _ls7TQnyTzg

Length: 22min 28sec (1348 seconds)

Published: Sat Nov 05 2022