Enrollment guide: Enroll Linux desktop devices in Microsoft Intune

Linux devices can be enrolled in Intune. Once they're enrolled, they receive the policies you create. Users can use the Microsoft Edge browser to access organization resources.

This article includes an overview of the administrator and user tasks required to enroll Linux devices.

Before you begin

For all Intune-specific prerequisites and configurations needed to prepare your tenant for enrollment, go to Enrollment guide: Microsoft Intune enrollment.

Linux enrollment

Use for personal/BYOD and organization-owned devices running Linux.


Feature Use this enrollment option when
You use Ubuntu Desktop (20.04 or 22.04 LTS on x86/64).
You use Ubuntu Server.
Devices are owned by the organization or school.
Devices are personal or BYOD.
You have new or existing devices.
Need to enroll a few devices, or a large number of devices (bulk enrollment).

Bulk enrollment isn't supported. Each device needs to be enrolled using the Microsoft Intune App.
Devices are associated with a single user.
Devices are user-less, such as kiosk or dedicated device.

The enrollment requires a user to sign in with an organization account.
Devices are managed by another MDM provider.

It might be possible to enroll Linux devices in Intune that are already enrolled in another MDM provider. This scenario hasn't been tested by Microsoft.
You use the device enrollment manager (DEM) account.

DEM accounts don't apply to Linux.

Administrator tasks

Other than having Intune setup, there are minimal administrator tasks with Linux enrollment.

  • Be sure your devices are supported.
  • Intune admins don't do anything to enable Linux enrollment in the Microsoft Intune admin center. It's automatically enabled. When users enroll their Linux devices, you see them in the Intune admin center > Devices > Linux.

End user tasks

The following steps provide an overview. For the specific steps, go to Enroll a Linux device in Intune.

Tip

When end users install the OS, it's recommended to enable encryption on the hard disk. After the OS is installed, it can be difficult to enable encryption.

  1. Download and install Microsoft Edge browser version 102.x and newer.
  2. Download and install the Microsoft Intune app for Linux. The install can take several minutes and requires a reboot. This app registers the device with Intune.
  3. Users open the Intune app, and sign in with their organization account (user@contoso.com). After they sign in, the enrollment process starts. It's possible users might be prompted to configure other settings based on your compliance policies.
  4. Users open Microsoft Edge and sign in with their organization account (user@contoso.com). After they sign in, they can access your organization's resources, like internal websites and Microsoft 365 apps.