This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 44%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Hi,
Is it possible that we could enforce a machine to run scripts when it registered to Azure AD?
It looks like Intune provide this function?
Is there any way to have this function without Intune? just want to explore more possible solutions
Thanks.
A cloud-based identity and access management service for securing user authentication and resource access
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 3%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMW%3C/text%3E%3C/svg%3E)
Is the machine an Azure VM? The only way I can think of is possibly using an Azure Function to trigger when the machine starts.
Intune would definitely be your best option in this scenario.
Thank you anonymous user
Our scenario are physical machines.
We use Azure AD to manage the devices.
It looks like Azure AD could view these devices, but can not manage them without Intune.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 69%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERJ%3C/text%3E%3C/svg%3E)
What is the OS of the devices? What do you want to run as part of the startup script?
Windows platform, I would like to enforce devices to install a specific application when the device register to Azure AD.
As noted, this is not possible as Azure AD does not contain this functionality. You need a management tool like Intune.
Implementing Intune looks like the best option by far. Also, you implement device policies on the machines once they’re fully joined.
Azure AD is not a device management platform and has no ability to apply policy, configuration, or scripts to devices associated with it. You need a management tool to enforce any type of management policy, configuration, or setting on devices.