how to create a test enviornment to enroll Devices on MDM

Question

how to create a test enviornment to enroll Devices on MDM

Thakur, Rohit 21

Hi Everyone,

I would like to know how to setup a test environment for Device MDM enrollment.
As per our current scenerio, we have Azure Ad connected via AD connect to On pre AD.
All the devices are synched on Azure AD as AD registered
however, we are planning to migrate our devices to Azure AD join
This is our production environment wherein Office365 is being managed via this.
I was going though the Azure AD connect topologies, however unable to understand which will suit best for testing before making any changes to production.
Kindly advise.

Accepted answer

0 additional answers

Your answer

Answer 1

VipulSparsh-MSFT 16,311 Microsoft Employee

@Thakur, Rohit Thanks for reaching out.

For a test tenant setup for Intune, you can follow this guide which will help you with step by step process of creating a free Intune tenant :
https://learn.microsoft.com/en-us/mem/intune/fundamentals/free-trial-sign-up

Since you mention that you have an onprem setup and devices are getting synced from on-prem to azure AD, the best state for your devices would be Hybrid Azure AD join, that way you can utilize the benefit of both world. Here is how you can perform Hybrid Azure AD join for the Existing devices :
https://learn.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy

For new Device you can use Autopilot under Intune to set them up as Hybrid Azure AD join - https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot-hybrid

Your topology seems to be straight forward, 1 on-prem AD syncing to 1 Azure AD tenant, so you do not have to worry about anything, you can go ahead and setup the devices to Hybrid State as per above scenarios. Feel free to let me know if you have any follow up questions.

-----------------------------------------------------------------------------------------------------------------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Thakur, Rohit 21 Reputation points

2022-01-06T09:25:48.487+00:00

Thank you for the information Vipul!
However, our management wanted to completely move to Azure AD and as far as I have read in microsoft Article, that there is not straight forward method to migrate from Hybrid Azure AD join to Azure AD join.
Please advise what will be the best approach.
Also, is there any possibility to create test Tenant in existing setup that sync with On prem AD using another AAD connect server, so that we can use test workstations of existing environment.
VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee

2022-01-07T04:57:50.22+00:00

@Thakur, Rohit For a complete Azure AD join , you can try considering Autopilot https://learn.microsoft.com/en-us/mem/autopilot/user-driven
This requires you to fetch the hardware hash from all devices and upload them into Intune, followed by Autopilot profile to be targeted to all devices.
This is a easier way for bulk enrollment and management. Make sure that you will have to clean up the Azure AD registered device entries from Azure AD portal.

Although there is a new feature which now allows to sync the same users to multiple Azure AD tenant, but this feature is in Preview now so support around this would be little tricky. You can read more here at
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#public-preview-sync-ad-objects-to-multiple-azure-ad-tenants

-----------------------------------------------------------------------------------------------------------------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Share via

how to create a test enviornment to enroll Devices on MDM

0 additional answers

Your answer