About the info button for work or school accounts

Question

Sorry for the amateur question.

I have something to tell you.

We are using Windows 10 at the site and have AzureAD and Intune environments.

There are users who use a terminal for the first time (domain-joined), but first they log in with their ID and password.

Settings [Accounts]-[Access work or school]

Enter your email address from "Connect" and sign in as you are prompted for a password.

I was told that the preparation was completed, but there was a terminal where the information button was not displayed in the "work or school account" that was completed.

• Multiple people are using it for the first time, so they are doing the same work, but only one person has an issue.
• The domain name is displayed for the other "Domain name connected to AD domain".

Check there.

If you are in such a state (the information button does not appear), could you tell me what kind of contents, settings, and items to check?

I think that the contents of Intune and AzureAD should be checked first, but what kind of settings and items should be checked...

Is there anything to check on the client side (terminal side)?

If this information alone is not enough, please let me know what other information you need...

I would like to know what kind of confirmation items are necessary.

Answer 1

@Miyajima, Norikazu, Thanks for posting in Q&A. From your description, it seems you want to enroll the devices into Intune and the devices are joined to on-premise domain. If there's any misunderstanding, feel free to let us know.

From the steps you provided, it seems you are doing Azure AD registered with auto enroll into Intune. One device is only Azure AD registered without enrolling into Intune.

You can follow the following steps to see if it can help:

1. Please check if the user has both Azure AD Premium license and Microsoft Intune Plan 1 license assigned in Intune portal.
2. Please check if the automatic enrollment is enabled. You can set MDM user scope as All and MAM user scope as none.

https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enroll#enable-windows-automatic-enrollment

In addition, for your situation, I want to say something. For the Azure AD registered devices, they will have some limitation when using Intune to manage these devices. like Feature update policy is not available.

https://learn.microsoft.com/en-us/mem/intune/protect/windows-10-feature-updates

I think you can consider doing Hybrid Azure AD join for these devices. This is recommended for your situation.

https://learn.microsoft.com/en-us/azure/active-directory/devices/howto-hybrid-azure-ad-join

After the devices have been Hybrid Azure AD joined, you can choose GPO enrollment method to enroll these devices into Intune. Here is a link with more details for your reference:

https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy

Hope the information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

thank you very much.