Azure AD Device - Product Key Activation

[Mudbar]

We had machines built in SCCM which used KMS to license the machines with a product key. We have now re-built them in intune as intune only devices.

 

Our supplier mentioned that the user can activate windows product key by having a Windows 10/11 Enterprise A3 for students use benefit license assigned to them. Is this true?

 

User has license assigned but its not activating the product key.

[foofighterjim]

This relies on the device having a valid Windows 10 / 11 license on the mainboard, if it doesn't then the CSP licensing method for Windows does not work.

[dylanm]

This relies on the device having a valid Windows 10 / 11 license on the mainboard, if it doesn't then the CSP licensing method for Windows does not work.

 

As foofihhterjim mentioned, it relies on the device having a product key in the TPM chip/main board. For the A3 license to work, you will also need to use/have Windows 10 Education Pro installed on the devices. The A3 license upgrades the OS to then use Windows 10 Education.

 

Here is a good article on the A3 license: https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

 

You can also push out a script/proactive remediation in Intune to check for the product key and then activate windows if one is installed.

[Mudbar]

Thank you for this information this is very helpful, it has been causing me quite a bit of confusion!

[talksr]

As foofihhterjim mentioned, it relies on the device having a product key in the TPM chip/main board. For the A3 license to work, you will also need to use/have Windows 10 Education Pro installed on the devices. The A3 license upgrades the OS to then use Windows 10 Education.

 

Here is a good article on the A3 license: https://learn.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

 

You can also push out a script/proactive remediation in Intune to check for the product key and then activate windows if one is installed.

 

Do you happen to have a copy of such a script? I am looking to do similar. I have a ton of Intune only devices which are not activated and need activation.

 

Thanks in advance.

[dylanm]

Do you happen to have a copy of such a script? I am looking to do similar. I have a ton of Intune only devices which are not activated and need activation.

 

Thanks in advance.

 

 

Give this a try: https://github.com/dylanmccrimmon/IntuneProactiveRemediations/tree/main/Repository/DigitalLicense

 

Download the two scripts and import them/create a proactive remediation within Intune.

[talksr]

Give this a try: https://github.com/dylanmccrimmon/IntuneProactiveRemediations/tree/main/Repository/DigitalLicense

 

Download the two scripts and import them/create a proactive remediation within Intune.

 

Thank you! I have just hit our next roadblock.... we don't have Intune licencing to do proactive remediation. So in essence.... we do not have the licence to enable the licences

 

I have contacted our licencing company to see if they can have a look at what licence we need and if we can just apply it to my admin account to keep the cost down. Gahhhhhhhhh!

[CHiLL]

Thank you! I have just hit our next roadblock.... we don't have Intune licencing to do proactive remediation. So in essence.... we do not have the licence to enable the licences

 

I have contacted our licencing company to see if they can have a look at what licence we need and if we can just apply it to my admin account to keep the cost down. Gahhhhhhhhh!

I believe that's included in the A3 or E3 license, which a single license applied would technically open it up to the whole tenant.

Edited September 19, 2024 by CHiLL

[talksr]

I believe that's included in the E3 license, which a single license applied would technically open it up to the whole tenant.

 

Thank you, yes this seems my understanding from my searching online. E3 or E5. Just waiting for our licencing partner to get back to me and I will see if we can afford to get it activated. I think it would be worthwhile having as I could then push other PS scripts.

 

Thanks for your help on this

[CHiLL]

Thank you, yes this seems my understanding from my searching online. E3 or E5. Just waiting for our licencing partner to get back to me and I will see if we can afford to get it activated. I think it would be worthwhile having as I could then push other PS scripts.

 

Thanks for your help on this

I've amended my post as I believe it's also in the A3 license. I'm looking at setting the timezone to automatic in Intune but there's no native Intune way to do it and the recommendation is to use a proactive remediation script. If this article is anything to go by, they say A3 includes it: https://www.mrgtech.net/setting-timezone-automatically/

[dylanm]

Give this box a tick within Intune and it should enable the Proactive Remediation (if I remember correctly).

 

[talksr]

Give this box a tick within Intune and it should enable the Proactive Remediation (if I remember correctly).

 

[ATTACH=CONFIG]72211[/ATTACH]

 

Thank you, just waiting for licencing partner to get back to me as I am quite sure the highest licence we have is an A1 so we wouldn't yet have the correct licence.

[talksr]

Give this box a tick within Intune and it should enable the Proactive Remediation (if I remember correctly).

 

[ATTACH=CONFIG]72211[/ATTACH]

 

Thank you, that has solved the issue. I am out of time for this week, but will pick up where I left off next week with the scripts you linked to. Thanks very much for your help on this.