Pre-provision Microsoft Entra hybrid join: Set up Windows automatic Intune enrollment

• Applies to:

  ✅ Windows 11, ✅ Windows 10

Windows Autopilot for pre-provisioned deployment Microsoft Entra hybrid join steps:

• Step 1: Set up Windows automatic Intune enrollment

• Step 2: Install the Intune Connector
• Step 3: Increase the computer account limit in the Organizational Unit (OU)
• Step 4: Register devices as Autopilot devices
• Step 5: Create a device group
• Step 6: Configure and assign Autopilot Enrollment Status Page (ESP)
• Step 7: Create and assign Microsoft Entra hybrid join Autopilot profile
• Step 8: Configure and assign domain join profile
• Step 9: Assign Autopilot device to a user (optional)
• Step 10: Technician flow
• Step 11: User flow

For an overview of the Windows Autopilot for pre-provisioned deployment Microsoft Entra hybrid join workflow, see Windows Autopilot for pre-provisioned deployment Microsoft Entra hybrid join overview.

Note

If automatic Intune enrollment is already set up, skip this step and move on to Step 2: Install the Intune Connector.

Set up Windows automatic Intune enrollment

In order for Windows Autopilot to work, devices need to be able to enroll in Intune automatically. Enrolling devices in Intune automatically can be configured in the Azure portal:

1. Sign in to the Azure portal.

2. Select Microsoft Entra ID.

3. In the Overview screen, under Manage in the left hand pane, select Mobility (MDM and WIP).

4. In the Mobility (MDM and WIP) screen, under Name select Microsoft Intune.

5. In the Microsoft Intune page that opens, under MDM user scope, select either All or Some:

   • If All is selected, all users can automatically enroll their devices in Intune.

   • If Some is selected, only users in the groups specified in the link under Groups can automatically enroll their devices in Intune. To add groups:

     1. Select the link under Groups.

     2. In the Select groups window that opens, select the desired groups to add. Make sure that the groups selected are Microsoft Entra user groups that contain the desired users.

     3. Once all of the desired groups are selected, select Select to close the Select groups window.

6. In the Microsoft Intune screen, if any changes were made, select Save.

Next step: Install the Intune Connector

Step 2: Install the Intune Connector

Related content

For more information on Windows automatic MDM/Intune enrollment, see the following articles:

• Enable Windows automatic enrollment.
• Set up Windows automatic enrollment.