Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Windows AutoPilot for Hybrid Environmnet.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 90%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Sheik Mohamed Yasar
350
Reputation points
Hi,
The scenario involves an environment where client devices do not have connectivity with Active Directory (AD). The connectivity can be established via Sophos VPN which is not supported by the Microsoft.
The objective is to implement "Windows AutoPilot" for Hybrid-Joined devices. Is it possible to achieve this with the Intune Connector for AD under these circumstances? as it supports Offline Domain Join.
Microsoft Security | Intune | Enrollment
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 90%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Pauline Mbabu 1,710 Reputation points Microsoft Employee2025-11-24T22:47:59.57+00:00 Hello Sheik,
I believe that the Intune Connector for AD with ODJ can handle the initial domain join request without direct AD connectivity, but the device still needs AD access later. If Sophos VPN cannot auto-connect during Autopilot, Hybrid Join will not fully complete until the VPN is manually connected.
https://learn.microsoft.com/en-us/autopilot/windows-autopilot-hybrid?tabs=general-requirements%2Cupdated-connector%2Cwindows-server-2025
Sign in to comment
Sign in to answer