In today’s Ask the Admin, I’ll show you how to enable device enrollment in Microsoft Intune and enroll a Windows 10 PC.
Microsoft Intune is a lightweight cloud-based PC and mobile device management product that uses Mobile Device Management (MDM), a set of standards for managing mobile devices, instead of Active Directory (AD) Group Policy, which is a Windows-only technology. For more information about Intune, see Introduction to Microsoft Intune on the Petri IT Knowledgebase.
Windows 10 PCs connect with Azure Active Directory and are then automatically enrolled in Intune. Before you can complete the instructions below, you will need both a trial Intune account and Azure Active Directory (Premium) subscription. Although the accounts are free for the trial period, credit card details are required to sign up for Azure AD Premium. I recommend creating an Intune account first, and then using the same account details to create an Azure AD Premium subscription. This will ensure that the Azure AD Directory is associated with your Intune subscription.
Assign User Licenses
The first step is to assign at least one user an Intune license. Licensing is managed from the Office 365 management portal.
Log in to the Office 365 management portal here with the admin account for your Intune subscription.
In the options on the right of the portal, click Users, and then Active users.
In the list of users, make sure that one of them has Intune A Direct listed in the status column. This might be the admin user for your Intune subscription or another user.
To enable an Intune license for a user, click the user in the list of Active Users, and then Edit to the right of Product licenses in the user’s dialog box.
Under Product licenses, switch Intune A Direct to On using the slider, and click Save.
Close the user’s dialog box.
Configure MDM Auto-Enrollment in Azure AD
To ensure that devices are automatically enrolled with Intune when they join Azure AD, you must configure MDM auto-enrollment for the directory.