Configuring Intune URL best practice?

Question

People,

How can I upload the Hardware hash for the new computer (Laptop & Desktop) from the shop, so the user at home can open up their computers out of the box, and then connected to Wifi at home to register and enrol to the Hybrid Azure AD domain I have?

I have found the script: https://www.powershellgallery.com/packages/Get-WindowsAutoPilotInfo but not sure how to run it since the computer is not even joined to the OnPremise AD DS yet.

This is the information I have for my company Hybrid Azure AD - OnPremise AD DS synched by Azure AD connect:

• Internal AD Domain name: Domain.local
• Azure AD tenant name: Company1.onmicrosoft.com
• Email Address: User.name@parentCompany.com

So what will be the MDM discovery and compliance URL ?

• EnterpriseEnrollment.WhatName.com : DNS name does not exist
• EnterpriseRegistration.WhatName.com : DNS name does not exist

Your help and suggestion would be greatly appreciated.

Thanks.,

Answer 1

@Enterprise Architect， Thanks for posting in Q&A.

For Autopilot registration, there are the following ways:

• OEM registration
• Reseller, distributor, or partner registration
• Automatic registration
• Manual registration

https://learn.microsoft.com/en-us/mem/autopilot/registration-overview

If the device you bought contain the Autopilot service, then OEM, Reseller, distributor or partner will help to do the registration. However, if the device doesn't contain the Autopilot service, we need to manually collect the hardware hash. You can do it via PowerShell script in the following link:

https://learn.microsoft.com/en-us/mem/autopilot/add-devices#powershell

To deploy hybrid Azure AD-joined devices by using Intune and Windows Autopilot, we can refer to the steps in the following link:

https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot-hybrid

As a note, this method needs the devices in office network, and it needs to access Active Directory domain controller.

For the MDM discovery and compliance URL, it is under automatic enrollment MDM user scope. If the automatic enrollment is configured, then the URL will be get automatically.

From the information you provided, I notice the on-premise domain and Azure AD tenant use different name. Please confirm if your domain is routable. If not, you can add the new UPN suffix as a workaround. Here is a link with more details for the refence:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/prepare-a-non-routable-domain-for-directory-synchronization?view=o365-worldwide

Hope it can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.