[1709, fcu] Azure AD Bulk Join \ WICD

[gshaw]

I'm currently trying to set up a loan pool of devices that we can give out to students for home use and as such joining them to Azure AD seems to make the most sense. In technical terms you could call them COPE devices (corporate owned personally enabled). None of them are new devices so will need reimaging to get to Win10 Education, hence requiring some form of initial imaging method to wipe and upgrade them.

 

I'm trying to do the following:

 

• image using MDT, push down some required software
  
• use a Provisioning Package to join to Azure AD with shared logon enabled
  
• complete updates etc. and leave machine ready to use
  
• no InTune at present
  

Now initially I looked at the "Set up School PCs" app that seems to do most of that; however all the documentation seems to suggest it's only for 1703 build at latest? So instead I looked at doing basically the same using Windows Imaging Configuration Designer as I know I can then push the ppkg file as part of MDT.

 

However there seems to be another issue, in WICD I can select Azure AD join but it asks for a Bulk Token, which it seems I can only obtain if we have an InTune subscription, or even worse AAD Premium (crazy £££ as it's priced per user even for Education).

 

https://docs.microsoft.com/en-us/intune/windows-bulk-enroll

https://docs.microsoft.com/en-us/intune/windows-enroll#enable-windows-10-automatic-enrollment

 

Prerequisites

- Azure Active Directory Premium subscription (trial subscription)

- Microsoft Intune subscription

 

So at that point I wonder

1. how does the Set up School PCs app work as it must use the same Bulk Enrolment to join to Azure AD?
   
2. is it supported on 1709 build?
   
3. will we have to work around the InTune requirement by using the OOBE method for students to assign themselves in a 1:1 fashion to a particular device?
   

 

@Arthur any thoughts?

Edited March 8, 2018 by gshaw

[maark]

I managed to get the set up schools PCs app to join a device to azure and intune - not sure how it worked but it did - I have no bulk token.

Main problem I had was that the keyboard and language reset to US rather than UK and I could not find a way of changing them. Had a call open with Microsoft but they did not come up with an answer.

[gshaw]

I managed to get the set up schools PCs app to join a device to azure and intune - not sure how it worked but it did - I have no bulk token.

Main problem I had was that the keyboard and language reset to US rather than UK and I could not find a way of changing them. Had a call open with Microsoft but they did not come up with an answer.

 

@maark do you have InTune then? That seems to be the key and more £££ on our licensing (not a huge amount but need to get it approved nonetheless)

 

The lack of customisation is kinda why I want to build my on WICD package rather than use the Set up School PCs one.

Edited March 8, 2018 by gshaw

[maark]

only trialing intune - still thinking about using devices managed by intune to replace old android tablets as the logon is quick and you are logged into 365. Not got any further with it due to working on other things.

[Arthur]

Now initially I looked at the "Set up School PCs" app that seems to do most of that; however all the documentation seems to suggest it's only for 1703 build at latest?

The following documentation implies the app works with 1703 or newer...

 

https://docs.microsoft.com/en-us/education/windows/use-set-up-school-pcs-app

 

the latest version of Set up School PCs requires Windows 10 versions with build 15063.0 or higher

 

However there seems to be another issue, in WICD I can select Azure AD join but it asks for a Bulk Token

Is it any different in the Windows Configuration Designer (née WICD) from the Microsoft Store?

 

https://www.microsoft.com/en-gb/store/p/windows-configuration-designer/9nblggh4tx22

 

My school hasn't purchased Intune either, so I'm unable to test unfortunately.

Edited March 8, 2018 by Arthur

[gshaw]

@Arthur yeah looks the same tool and that bit about Bulk Token. Do you use any Azure AD joined machines at all?

 

Edit: just tried the app again, looks like it makes a ppkg file joining the devices as the user who runs it, interesting. May end up doing the initial image work with MDT then just apply the School PCs ppkg at the end to get the Azure part done.

Edited March 8, 2018 by gshaw

[TheDillweed]

@gshaw Any luck with this through MDT? Currently, any PPKG I create fails on the Azure AD join