Auto Enrollment Intune devices already azure AD joined

Question

Hi,

We have many machines joined to Azure AD, and we would now like to have these joined to Intune
How would we solve this without having to reset the machines ?

I tried to enable Azure AD > Mobility and hoped that would be enough, but guess not ?

Answer 1

You don't need to reset the device. If the device has already been joined in Azure AD, you can sign in to the Windows with the user account with local administrator permissions. Then, you can perform the enrollment just as @Nick Hogarth suggested.

You can open the Settings app, and go to Accounts > Access work or school, then click Enroll only in device management. Plus, if there is no Enroll only in device management option, you can click Connect, and add the Azure AD account again.

Answer 2

Those settings above are for Auto enrollment into Intune. So when you join Azure AD (at the OOBE or Autopilot) it will enroll into Intune, also used for other enrollments like using a GPO for Intune enrollment, or Co-management with ConfigMgr etc.

Have you had a user go to Settings > Accounts > Access work or school > Enroll only in device management? (they will need admin rights for this)

Answer 3

Those settings are only for when Azure AD join is performed. There is no easy way to do this unfortunately.

Answer 4

Hi,

Thanks for reply.
So as I understand this, the users have 2 choices ?

1. Do a reset
2. Create a local admin account, disconnect Azure AD and then do a rejoin

Correct ?

Second question, what exactly does does the settings in the image above do ?

/Regards
Andreas