M365 Apps (Device) licensing - Entra, Intune and Azure.

[Shaun_Dark_Lord]

Hi All

 

We recently moved to Microsoft EES licensing.  Our reseller told us during the discussions around moving to EES, that there was still a way to allow our students to use Office without needing to sign in.

 

That method was the "M365 Apps Enterprise Devices Edu Sub Add-on", and supposedly, all we need to do is get our clients to appear in entra.microsoft.com and there we can assign the licenses.

 

Any idea of how we're supposed to get our domain clients there?  The users can be synced with the "Azure AD Connect" tool, which seems to sync everything other than computers.  I can get SCCM to sync clients into InTune, but that doesn't seem to talk to Entra.

 

Any help would be greatly appreciated.

[Roberto]

Computers absolutely can sync to Entra ID via Entra ID connect. 

 

So if yours are not, it may be that whoever last updated the Entra ID connect settings did not configure the sync to include the OU that contains your workstation accounts in AD, or they did something else to filter out computers from the sync.

 

Maybe use the MS guides to hybrid join https://learn.microsoft.com/en-us/entra/identity/devices/how-to-hybrid-join to give you some pointers but don't change anything unless and until you're sure you know what to change and you've grabbed a backup of your Entra ID Connect config.

Edited August 5, 2025 by Roberto

[Shaun_Dark_Lord]

Thanks @Roberto

 

I can see the computers "syncing" in the sync manager;

 

 

But in entra.microsoft.com I cannot see these.  Maybe I just need to be patient?  Odd that the users and groups appeared instantly.

Edited August 5, 2025 by Shaun_Dark_Lord

[Roberto]

Where is that syncing to?

 

Entra ID connect can be thought of as a multi-stage sync process 

Objects in AD > sync to > Entra ID Connect database (called a metaverse)

Eligible Objects in the Metaverse have any necessary transformations applied to fields, then > sync to > Entra ID.

 

It’s been a few years since I last touched this myself but from memory, you need to enable the hybrid join part of Entra ID Connect and make sure your computer OU is included in the OUs for the sync job.

 

 

[Shaun_Dark_Lord]

49 clients appeared overnight - Guess patience was the answer.