How to limit and enforce login with work account on new laptop and old laptop?

Question

I want to know how to force users to log in to the company's laptop-only work account (M365).
To clarify, when hiring a new employee, provide him with a laptop. I wanted the only option to log in to the laptop was a work account.

Answer 1

@Mohsen Akhavan, Thanks for the reply. For the steps I provide previously, yes, it should login with local admin account to do the join. I notice you want just work account login without any local account. It's OK. You can configure Windows Autopilot user-driven Microsoft Entra join in Intune. And do Autopilot enrollment for these devices. For detailed steps, you can refer to the following link:

https://learn.microsoft.com/en-us/autopilot/tutorial/user-driven/azure-ad-join-workflow

For new devices, when the device restart, it will ask to enter your work account to sign into the device to finish the Autopilot enrollment.

For old device, you can reset the device to start the Autopilot enrollment after we configure Autopilot in Intune.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

@Mohsen Akhavan, Thanks for posting in Q&A. To ensure that new employees can only log in to their laptops using their work (Microsoft 365) accounts, you can configure the laptops to join Microsoft Entra ID. Here are the steps to set this up:

Open Settings:

• Go to the Start menu and select Settings (gear icon).

Access Accounts:

• In the Settings window, select Accounts.

Access Work or School Accounts:

• In the left-hand menu, select Access work or school.

Join Azure Active Directory:

• Click on Connect and then select Join this device to Azure Active Directory.
  Sign In:
• Enter the employee's Microsoft 365 credentials when prompted.

Once the device is joined to Microsoft Entra ID, the employee will be able to log in using their work account credentials. This setup ensures that personal Microsoft accounts cannot be used to log in to the laptop

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.