Windows 11 - Sync to Entra and Intune

[Bankesy]

Hi all,

 

I'm noticing that when I reimage devices to Windows 11, they don't appear to sync with Entra ID or register to Intune as they did on Windows 10.

 

I didn't have anything to do with the existing Windows 10 MDT task sequence, but I know it pointed at a golden image ISO for the 'Install operating system' step, which I've removed and replaced with the Windows 11 Education ISO.

 

I wonder if there was something in that Windows 10 golden image ISO which registered the devices with Entra and Intune. The main issue here is freshly imaged Windows 11 devices are not pulling the Intune Management Extension.

 

Is there something I am missing? Is there a way I can load the old Windows 10 ISO, upgrade it to Windows 11 and then put it back in the task sequence?

 

Thanks

[DavR]

Are you installing your Windows 11 devices into a domain first, and then syncing them with Entra to achieve Hybrid joined devices, or do you have a method in place that does a straight Entra only join?

 

If the former, I'd say it's probably the config of your sync tool, somewhere along the way, rather than some hidden script in the Windows 10 image. The Azure AD Sync tool can be targeted to OUs, so if your WIndows 11 devices are in different OUs to Windows 10, it's probably that.

 

Have a look on your Domain Controllers, and see what the properties are for the Azure AD Sync Tool. If you've done nothing with it recently, you may also find that the tool itself needs upgrading.

[buzzard]

27 minutes ago, Bankesy said:

Hi all,

 

I'm noticing that when I reimage devices to Windows 11, they don't appear to sync with Entra ID or register to Intune as they did on Windows 10.

 

I didn't have anything to do with the existing Windows 10 MDT task sequence, but I know it pointed at a golden image ISO for the 'Install operating system' step, which I've removed and replaced with the Windows 11 Education ISO.

 

I wonder if there was something in that Windows 10 golden image ISO which registered the devices with Entra and Intune. The main issue here is freshly imaged Windows 11 devices are not pulling the Intune Management Extension.

 

Is there something I am missing? Is there a way I can load the old Windows 10 ISO, upgrade it to Windows 11 and then put it back in the task sequence?

 

Thanks

I assume these are Domain joined devices that you manage Hybrid? Are these going into the Computers CN in AD and your EntrID sync is targeted on a specific OU?

[DavR]

You may also find this page in your M365 console useful, telling you when your last sync ran. 

 

https://admin.microsoft.com/AdminPortal/Home#/dirsyncmanagement 

[Bankesy]

@buzzard @DavR

 

No, they are going into the same OU as the Windows 10 devices that are syncing, and the last sync times in 365 are up to date.

 

I'll look into a bit further.

 

Thank you