Multiple AD domain's machines enroll to single Intune tenant

Vij 301 Reputation points

Looking for best practices and approaches for multiple domain workstations enroll to intune.

We have an environment with around 10 domains all are on-premises AD. Now we have a single Intune tenant. the condition needs to follow the hostname naming convention.

Could you guide me what is the best practices to implement the autoenrollment from Intune and mass/bulk enrollment for existing machines.

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,207 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
18,636 questions
0 comments No comments
{count} votes

Accepted answer
  1. Carlos Solís Salazar 15,921 Reputation points

    Thank you for asking this question on the Microsoft Q&A Platform.

    If those domains are in the same Domain Controller You should install Azure AD Connect on your server

    Azure AD Connect is an on-premises Microsoft application that's designed to meet and accomplish your hybrid identity goals.

    You can follow these steps

    If those domains are in multiple domain controllers, you should follow any of the topologies described here -->

    Hope this helps!

    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

    NOTE: To answer you as quickly as possible, please mention me in your reply.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Crystal-MSFT 40,461 Reputation points Microsoft Vendor

    @Vij, Thanks for posting in Q&A.

    From Intune side, for these existing machines, if they can do Hybrid Azure AD joined successfully with AzureAdJoined, DomainJoined and AzureAdPrt as yes under "dsregcmd /status", then you can choose GPO to do the enrollment in a bulk.

    Here is a link with more details in the following link:

    Hope it can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments