Best practice implementing Intune

Question

Hi,

We have an environment with local domain controllers, some clients are added to the local domain and some are not, they are just added to the tenant. Most of them are Azure AD registered. We would like to now go all Microsoft 365 without any local domain.
How would you go forward, to have every device Azure AD Joined ?

Thanks for reply

/Andy

Answer 1

You can reimage the devices and use Autopilot to get the devices to be Azure AD Joined and enrolled into Intune. If you don't want to reimage the existing on-prem AD joined devices , you can use a GPO to enroll them into Intune.

Answer 2

Please understand whether Azure AD registered or Azure AD joined depends on account type not the enrollment type.
For Azure AD registered, it means devices that are Azure AD registered are typically personally owned or mobile devices, and are signed in with a personal Microsoft account or another local account.
o Windows 10
o iOS
o Android
o MacOS
For Azure AD joined, it means Devices that are Azure AD joined are owned by an organization, and are signed in with an Azure AD account belonging to that organization. They exist only in the cloud.
o Windows 10
o Windows Server 2019 Virtual Machines running in Azure (Server core is not supported)
Reference: https://learn.microsoft.com/en-us/azure/active-directory/devices/overview

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

Hi,

Thanks for reply. If I use a GPO they will still be AD registered and not AD Joined ?

/Andy