Devices added to Intune but not enrolled

[BroganOs]

I’m trying to learn how to use Intune, but I’ve struggling to get devices enrolled.

 

Ideally I’d like them enrolled by an admin and assigned to a user.

 

What I have done is added 3 laptops by uploading their details using a csv and autopilot, assigned a profile and a user. But they are still showing up as not enrolled.

 

Has anyone any advise on how I can enroll them?

[computer_expert]

Have you created a provisioning package? https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll

 

If you have intune for education you may want to use the setup school PC app instead from the app store: https://docs.microsoft.com/en-us/education/windows/set-up-windows-10

[BroganOs]

Thanks I haven’t created a provisioning package, I thought that it was for new devices only.

 

I’m trying to add laptops already in use and setup as I want them because they are going offsite again in a few days and I thought it would be an ideal opportunity to try out managing offsite devices using Intune.

[computer_expert]

The provisioning package does require a reinstall (you plug the USB key in when it gets to the OOBE part and it takes over). I'm not sure if it works with existing devices though.

 

See this for manual enrollment. I can't remember if windows then promotes the account you use for enrollment to local admin or not (it doesn't if you use the provisioning package)

Edited July 28, 2020 by computer_expert

[BroganOs]

Great thanks I’ll have a read of that now

[BroganOs]

Well I’ve successfully added a device using the method in that link.

 

However can I ask is it recommended that the user is given enrollment manager rights and uses their own login details to enroll or an administrator?

[NicholasEsping]

It is not recommended to give users enrollment manager rights unless you want them to be able to enroll their personal devices into your management system.

[NicholasEsping]

If these computers are currently managed with GPO you could look at enrolling them that way. Computer Configuration/Administrative Templates/Windows Components/MDM/ Enable automatic MDM enrollment using default Azure AD credentials. I set up some of our devices with GPO and some with provisioning packages and PowerShell both ways work out. If you are going the autopilot route the devices will need to be reset before you can manage them I believe.

[BroganOs]

Thanks the good to know about autopilot.

 

I will get on the gpo tomorrow [emoji1303]