Non AD Joined Computers

Question

Hey Everyone i have a customer that would like to get into intune. they have approximately 100 stores with roughly 10-15 computers a store. All of them are not joined to the domain and have an auto login.
What would be the best way to get them enrolled into intune?
I am thinking of using a DEM account to do this would that work and have you had any experience on this?

Any other suggestions would be appreciated

thanks

Answer 1

DEM enrollment is the recommended way for your scenario. You can enroll up to 1,000 mobile devices with a single Azure Active Directory account by using a device enrollment manager (DEM) account. DEM is an Intune permission that can be applied to an AAD user account and lets the user enroll up to 1,000 devices. A DEM account is useful for scenarios where devices are enrolled and prepared before handing them out to the users of the devices. See the detailed information of DEM enrollment:

https://learn.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll

Answer 2

Just note though if you enroll with a DEM account, the DEM account is the primary user for the device (last time I checked). If you want to target apps/policies to users, then you will need to change the primary user