User-Initiated Intune Enrollment and Azure AD Join

in this video we're going to walk through the steps a user can take to add a device to Azure ID and enroll it in InTune [Music] hello everyone I'm Travis and this is feraldos in a previous video we went through the steps of enrolling hybrid Azure 80 joined devices into InTune that was an administrator controlled task the configuration took place with gpos in this video we're reviewing a couple options for a user to join a Windows client to Azure ad and enroll the device into InTune before that please like subscribe and click the Bell icon for notifications of new content that helps others discover this channel check out my courses on Windows 365 Azure virtual desktop and hybrid identities with Windows ad and Azure ID the links are below and thank you channel members your support is appreciated back to it we're going to walk through two options a user can take to Azure 80 join a Windows client and enroll it into InTune this is a manual process that relies on the end users to take action I guess what I'm saying is this video will not cover Windows autopilot that's a topic for another day there are two ways a user can enroll a device the first is for company-owned devices that takes place during the out of box experience or Obe that's the screen we all see on a fresh install of Windows when we first log in the other way assumes the user has already signed into the windows client with a local account this could be a personal or bring your own device we're going over the steps to enroll that device for InTune management and join Azure 80. with personal or BYOD devices that the users already logged into they have two options they can connect by entering an email address or choose to join the device to Azure ID the email option does not Azure ad join the device if that option is used the user is managed but not the device because we're talking about device management we don't want the email option instead we're going to choose the option to join the device to Azure ID this will manage the device and the user the user should know that their device will be managed by the organization before they perform these steps to follow along make sure that InTune is enabled in the tenant if using groups for device management the user should be in that group also the user has to be licensed for InTune these topics are covered in a previous video check out my playlist for more information and Windows home version is not supported for Azure adjoin only Pro or Enterprise let's jump into the portal to get started here we are in the InTune portal we covered enabling InTune in the tenant in a previous video I'm just going to review the settings in case you missed it we'll go to devices enroll devices automatic enrollment in this example MDM is configured and the scope is sum or based on a group if you also selected some be sure the user that joins devices to The Domain has an InTune license and is a member of the group we can view the group by clicking on one group selected and it shows the group next we'll see how a user can enroll a device into InTune with new Hardware in the out of box experience here we are at a new Windows 10 OS install on the laptop some of the windows and UI information may be a little dated this is an older version of Windows 10 the principles still apply we'll keep going through the setup here's the part that counts we have the option to set up the device for personal use or set it up for an organization we'll select setup for an organization we'll sign in with a user account this account has to have an InTune license applied and if using group membership for MDM it has to be a member of that group we'll sign in with the test account we can accept the privacy settings and we'll finish signing in I'll cut out some of the waiting time if the user has MFA enabled they will get a prompt next we'll create a pin and now we're signed in we can verify that we're joined to the Azure ID domain by going to settings accounts it shows the user account let's go to access worker School and here it shows we're connected to the Azure ID domain we can also select more information for more details let's move on to see the steps if the user has an existing device they logged into with a local account here we have a personal device that the user has already signed into with a local account to enroll it into InTune and Azure 80 join we'll go to settings accounts access worker School and connect the first option is to enter an email address this will Azure 80 register the device not Azure 80 join we won't be able to manage the device just the user this may be a good option when we don't own the device but want to have control over the user and the applications they access but that's not what we're trying to accomplish in this video instead go to join this device to Azure active directory we'll follow the steps to join the device to Azure ID a confirmation prompts for the user click join we'll give it a minute to finish and that's done now our device is azure ID joined we can click done now we can switch accounts and log in with our Azure a b account next let's go back to InTune and view our enrolled devices here we are in InTune let's go to devices and windows devices and there are the two devices we just added the laptop we enrolled through the out of box experience and the client we joined to Azure ID that is how users can Azure 80 join a device and enroll it into InTune that's it I hope this helps you better understand steps users can take to enroll devices into InTune please don't forget to like And subscribe and thanks for watching

Channel: Travis Roberts

Views: 2,218

Keywords: Intune Enrollment, Intune Auto Enroll, automatic enrollment, AD DS, Azure AD, Intune, Microsoft, Mobile Device Management, MDM, Mobile Application Management, MAM, Intune Portal, free, tutorial, Intune learning, walkthrough, azure, azure training, azure free, mobile endpoint management, MEM, BYOD, OOBE, user join

Id: TyPQWDxSyZU

Length: 7min 13sec (433 seconds)

Published: Sun Jul 30 2023