Microsoft Endpoint Manager Intune Intro, Windows 10 Autopilot Enrolment, Hybrid Azure AD join Part 1

Part one of this video shows a step by step guide how to enroll Windows 10 devices to Microsoft Endpoint Manager (AKA Intune) for device management.

As shown in the diagram, We will walk through the process manually and also automatically using autopilot by ‘Hybrid joining’ a device so that it is visible and joined to both on-premises AD and in Azure AD.

We show obtaining the hardware hash of the Windows 10 device, and then importing this into Endpoint Manager so the device can be automatically registered and built with the assigned policy to that device. The idea being is that this registration is performed by the OEM, reseller, or distributor from which the devices were purchased or the registration can also be done within your organization by collecting the hardware identity and uploading it manually.

Also shown will be the configuration of Hybrid Azure AD join in AD Connect to register devices from on premise AD to Azure AD and the Intune Connector which creates autopilot-enrolled computers in the on-premises Active Directory domain.

We have already added a custom domain in the Azure tenant - cloudinspired.co.uk and have AD connect sync up and running. We won’t be covering that in this video, but links are in the description going through the AD connect and custom domain setup if you need them.
Part two of this video will be be released soon going though application delivery, and part three will cover patching and updates to devices.

Please subscribe to the channel to be notified of up and coming parts of this video series, together with technical videos on cloud and certification.

Subscribe here, new videos posted weekly.
   / @cloudinspired  

Contents covered in this video in summary are setting up trial licenses, explaining the different device identities, group creation for both users and devices, autopilot profiles, Intune connector, AD connect hybrid azure ad join, exporting and importing hardware hash for device registration, domain join profiles to windows 10 devices are automatically added to the domain and finally with all the settings in place we register a Windows 10 device into Intune by turning it on from scratch with the out of box experience and looking at the steps of setup and automatic configuration of that device.

0:20 - Intro and Diagram
3:29 - Intune Trial Licenses
4:39 - Device Identities
5:34 - Group Creation for Users
6:08 - Premium trial license for auto enroll
6:45 - Autopilot - Add User groups & settings
8:17 - Autopilot Enrolment profile - User driven Azure AD Joined (User Group)
9:35 - Adding Windows 10 devices in Endpoint Manager portal (Manually)
11:18 - Install the Intune Connector
13:26 - AD Connect - Hybrid Azure AD Join
14:34 - Autopilot - Add Device groups
15:29 - Export and Upload Hardware Hash for registration
16:32 - Autopilot Enrolment profile - User driven Hybrid Azure AD joined (Device Group)
18:10 - Enrolment status
18:31 - Domain Join Profile
19:46 - GPO: Enable automatic MDM enrollment in Intune MDM using Azure AD credentials
21:09 - Demo - Registering Windows 10 Out-of-box experience (OOBE) (Hybrid Azure AD join)

Intune Trial
https://go.microsoft.com/fwlink/?link...

Endpoint Manager Overview
https://docs.microsoft.com/en-us/mem/...

Different Device Identities
https://docs.microsoft.com/en-us/azur...

Group Policy MDM Download Administrative Templates (.admx) for Windows 10 May 2020 Update (2004)
https://www.microsoft.com/en-us/downl...

Intune Connector Download
In the Microsoft Endpoint Manager admin center, devices, windows, windows enrollment, Intune Connector for Active Directory.
Click Add and then download the intune connector.

Azure AD connect Setup and Deployment
   • Azure AD Connect | Active Directory |...  


Microsoft Endpoint Manager (Intune) | Windows 10 Application Delivery | Office 365, Chrome | Part 2
   • Microsoft Endpoint Manager Intune App...