Multiple AD domain's machines enroll to single Intune tenant

Vij 306 Reputation points
2023-01-29T14:26:45.4633333+00:00

Looking for best practices and approaches for multiple domain workstations enroll to intune.

We have an environment with around 10 domains all are on-premises AD. Now we have a single Intune tenant. the condition needs to follow the hostname naming convention.

Could you guide me what is the best practices to implement the autoenrollment from Intune and mass/bulk enrollment for existing machines.

Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,320 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,634 questions
0 comments No comments
{count} votes

Accepted answer
  1. Carlos Solís Salazar 17,791 Reputation points MVP
    2023-01-29T20:33:54.5066667+00:00

    Thank you for asking this question on the Microsoft Q&A Platform.

    If those domains are in the same Domain Controller You should install Azure AD Connect on your server https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect

    Azure AD Connect is an on-premises Microsoft application that's designed to meet and accomplish your hybrid identity goals.

    You can follow these steps https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express

    If those domains are in multiple domain controllers, you should follow any of the topologies described here --> https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-sync-server-users-are-represented-in-only-one-directory

    Hope this helps!


    Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

    NOTE: To answer you as quickly as possible, please mention me in your reply.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Crystal-MSFT 46,271 Reputation points Microsoft Vendor
    2023-01-30T02:16:38.8633333+00:00

    @Vij, Thanks for posting in Q&A.

    From Intune side, for these existing machines, if they can do Hybrid Azure AD joined successfully with AzureAdJoined, DomainJoined and AzureAdPrt as yes under "dsregcmd /status", then you can choose GPO to do the enrollment in a bulk.

    Here is a link with more details in the following link:

    https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy

    Hope it can help.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments