Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
In this article, you set up Microsoft Intune to automatically enroll Windows corporate-owned devices, and user-owned devices for bring-your-own-device (BYOD) deployments. You can scope automatic enrollment to some Microsoft Entra users, all users, or no users.
This article is part of an Evaluate and Try series that helps you evaluate Microsoft Intune's capabilities.
Prerequisites
Licensing requirements
- A Microsoft Intune subscription. Sign up for a free trial account.
- Microsoft Entra ID P1 or P2 or the Premium trial subscription. You can activate a free Premium trial subscription during setup.
Roles requirements
Sign in to the Microsoft Intune admin center with the following role:
- Built-in Global Administrator Microsoft Entra role
Device configuration requirements
To complete this step, you must:
Set up automatic enrollment
In this example, you configure Microsoft Intune mobile device management (MDM) enrollment settings so that corporate-owned and personal devices automatically enroll in Microsoft Intune. MDM user scope enables automatic enrollment for Microsoft Intune device management.
In the Microsoft Intune admin center, go to Devices > Enrollment.
Go to the Windows tab. Then select Automatic Enrollment.
Important
Automatic MDM enrollment is a premium Microsoft Entra feature available for Microsoft Entra ID Premium subscribers. If you can't see the automatic enrollment settings, select Automatic MDM enrollment is available only for Microsoft Entra ID Premium subscribers to activate a free trial.
Select Microsoft Intune.
Configure the MDM and WIP user scope.
- For MDM user scope select All. Or you can select Some and select Contoso Testers as the group. Make sure users aren't members of a group targeted by the WIP user scope.
- For WIP user scope, select None. You're only setting up automatic enrollment for mobile device management.
Use the default values for the remaining settings on the page.
Choose Save.
Important
If you configure both user scope types for the same user:
- The MDM user scope takes precedence if they're on a corporate-owned device. The device automatically enrolls in Microsoft Intune when they set it up for work.
- The WIP user scope takes precedence if they bring their own device. The device doesn't enroll in Microsoft Intune for device management. Microsoft Purview Information Protection policies are applied if you configured them.
Clean up resources
To reconfigure Intune automatic enrollment, see Set up enrollment for Windows devices.
Next steps
In this task, you learned how to set up automatic enrollment for devices running Windows. For more information about device enrollment, see Device enrollment overview.
To continue evaluating Microsoft Intune, go to the next step: