{"id":2500,"date":"2020-12-02T23:13:39","date_gmt":"2020-12-02T23:13:39","guid":{"rendered":"https:\/\/hypervlab.co.uk\/?p=2500"},"modified":"2021-12-10T14:33:08","modified_gmt":"2021-12-10T14:33:08","slug":"autopilot-hybrid-machine-to-intune-enrollment","status":"publish","type":"post","link":"https:\/\/hypervlab.co.uk\/?p=2500","title":{"rendered":"AutoPilot – Hybrid Machine to Intune Enrollment"},"content":{"rendered":"Reading Time: <\/span> 4<\/span> minutes<\/span><\/span>\n

In this blog post, we will cover the steps of a converting a Hybrid Joined Windows Device to an AutoPilot\/Intune Enrolled machine. – Firstly this blog post assumes that you already have AzureAD Sync Setup<\/a> and AzureAD Hybrid Device Sync<\/a> configured.
For this example, in this lab, we have a computer “HYPERVLAB-PC01” which is a Windows 10 Enterprise Device.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

NOTE:<\/strong> If you are struggling to find the device in AzureAD, You might need to force sync from your AzureAD Sync Server. – One thing that I found while creating this post is that the AD Sync wasn’t as fast as I’d liked and took around 15 minutes to catch up and sync the computer into AzureAD.<\/p>\n\n\n\n

Hybrid Sync Error – Reference Note<\/h3>\n\n\n\n

To Check if your device has synced status with AzureAD you can run the command: dsregcmd \/status<\/p>\n\n\n\n

+----------------------------------------------------------------------+\n| Diagnostic Data                                                      |\n+----------------------------------------------------------------------+\n\n     Diagnostics Reference : www.microsoft.com\/aadjerrors\n              User Context : UN-ELEVATED User\n               Client Time : 2020-12-02 22:25:54.000 UTC\n      AD Connectivity Test : PASS\n     AD Configuration Test : PASS\n        DRS Discovery Test : PASS\n     DRS Connectivity Test : PASS\n    Token acquisition Test : SKIPPED\n     Fallback to Sync-Join : ENABLED\n\n     Previous Registration : 2020-12-02 22:24:29.000 UTC\n         Registration Type : sync\n               Error Phase : join\n          Client ErrorCode : 0x801c03f2\n          Server ErrorCode : DirectoryError\n            Server Message : The device object by the given id (3c849a08-096e-467c-8eab-b8a3b8f200c0) is not found.\n              Https Status : 400\n                Request Id : 49a1e99c-4690-4df9-bffb-630f3698dfa9\n<\/code><\/pre>\n\n\n\n
Should you get this error message, it means that the device has not synced up to the Azure Tennant, You will need to run a force sync from AzureAD Synchronization Service Manager.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
From the reference computer in question, Open Command Prompt as an administrator and run the command:
dsregcmd \/join<\/em>.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Followed by dsregcmd \/status<\/em>. If the device and checked into AzureAD the Diagnostic Data should report as PASSED.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
and finally from the AzureAD Portal, under devices you should see the computer in question.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Group Policy – Enable Automatic MDM Enrollment.<\/h3>\n\n\n\n
From the Group Policy Management Window, Lets create a new Policy.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Next, lets link the new group policy object to the OU in question “Computers”.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Select the policy we just created “[C] MS Intune – Auto MDM Enrollment.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Right-click on the policy and open then Group Policy Management Editor, The Location we are wanting is:
Computer > Polices > Administrative Templates > Windows Components > MDM.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Open the “Enable automatic MDM enrollment using default Azure AD credentials” from the dropdown select “User Credentials” – Trust me on this one, I tried Device Credential and spent two hours debugging and reading event logs!<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Once the policy has been configured, we can reboot the reference computer. <\/p>\n\n\n\n
We can check the status on the MDM Enrollment from the Windows Event Viewer (eventvwr.msc)<\/p>\n\n\n\n
Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider > Admin.<\/em><\/p>\n\n\n\n
From the Event Viewer logs, If you see an event ID value of “75”. This means that the device is passed the MDM Steps and in now enrollment into Microsoft Intune. If you don’t some further diagnostics is required. [Troubleshooting Steps<\/a>]<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Checking in the AzureAD Devices Portal you will see the device change from a Compliant State to None Compliant.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
However, checking on the local machine under: C:\\Program Files (x86). You should see the Intune Management Extension Folder.<\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
Refreshing the Intune Portal will show the device as “Co-Managed”. <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Now its time to grab a coffee, Intune needs to do its thing and complete the sync status and shortly the device will become compliant and be fully enrolled Intune device. <\/p>\n\n\n\n
\"\"<\/figure><\/div>\n\n\n\n
\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"
Reading Time: <\/span>  4<\/span> minutes<\/span><\/span>In this blog post, we will cover the steps of a converting a Hybrid Joined Windows Device to an AutoPilot\/Intune Enrolled machine. – Firstly this blog post assumes that you already have AzureAD Sync Setup and AzureAD Hybrid Device Sync configured.For this example, in this lab, we have a computer “HYPERVLAB-PC01” which is a Windows […]<\/p>\n","protected":false},"author":2,"featured_media":2501,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[259],"tags":[285,93,299,95,287,298],"class_list":["post-2500","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-m365-modern-desktop-administrator-associate-md-100","tag-autopilot","tag-azuread","tag-hybrid","tag-hybridsync","tag-intune","tag-m365"],"yoast_head":"\nAutoPilot - Hybrid Machine to Intune Enrollment - HypervLAB<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hypervlab.co.uk\/?p=2500\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AutoPilot - Hybrid Machine to Intune Enrollment - HypervLAB\" \/>\n<meta property=\"og:description\" content=\"Reading Time:  4 minutesIn this blog post, we will cover the steps of a converting a Hybrid Joined Windows Device to an AutoPilot\/Intune Enrolled machine. – Firstly this blog post assumes that you already have AzureAD Sync Setup and AzureAD Hybrid Device Sync configured.For this example, in this lab, we have a computer “HYPERVLAB-PC01” which is a Windows […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hypervlab.co.uk\/?p=2500\" \/>\n<meta property=\"og:site_name\" content=\"HypervLAB\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-02T23:13:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-12-10T14:33:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Simon Lee\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/smoon_lee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simon Lee\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2500\",\"url\":\"https:\/\/hypervlab.co.uk\/?p=2500\",\"name\":\"AutoPilot - Hybrid Machine to Intune Enrollment - HypervLAB\",\"isPartOf\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2500#primaryimage\"},\"image\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2500#primaryimage\"},\"thumbnailUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png\",\"datePublished\":\"2020-12-02T23:13:39+00:00\",\"dateModified\":\"2021-12-10T14:33:08+00:00\",\"author\":{\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\"},\"breadcrumb\":{\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2500#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/hypervlab.co.uk\/?p=2500\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2500#primaryimage\",\"url\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png\",\"contentUrl\":\"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/hypervlab.co.uk\/?p=2500#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/hypervlab.co.uk\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AutoPilot – Hybrid Machine to Intune Enrollment\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/hypervlab.co.uk\/#website\",\"url\":\"https:\/\/hypervlab.co.uk\/\",\"name\":\"HypervLAB\",\"description\":\"Blogging about all thing Microsoft\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/hypervlab.co.uk\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359\",\"name\":\"Simon Lee\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g\",\"caption\":\"Simon Lee\"},\"description\":\"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \\\"hypervlab\\\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.\",\"sameAs\":[\"https:\/\/hypervlab.co.uk\",\"https:\/\/www.linkedin.com\/in\/simon-john-lee\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee\"],\"url\":\"https:\/\/hypervlab.co.uk\/?author=2\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AutoPilot - Hybrid Machine to Intune Enrollment - HypervLAB","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hypervlab.co.uk\/?p=2500","og_locale":"en_GB","og_type":"article","og_title":"AutoPilot - Hybrid Machine to Intune Enrollment - HypervLAB","og_description":"Reading Time:  4 minutesIn this blog post, we will cover the steps of a converting a Hybrid Joined Windows Device to an AutoPilot\/Intune Enrolled machine. – Firstly this blog post assumes that you already have AzureAD Sync Setup and AzureAD Hybrid Device Sync configured.For this example, in this lab, we have a computer “HYPERVLAB-PC01” which is a Windows […]","og_url":"https:\/\/hypervlab.co.uk\/?p=2500","og_site_name":"HypervLAB","article_published_time":"2020-12-02T23:13:39+00:00","article_modified_time":"2021-12-10T14:33:08+00:00","og_image":[{"width":1200,"height":600,"url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png","type":"image\/png"}],"author":"Simon Lee","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/smoon_lee","twitter_misc":{"Written by":"Simon Lee","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/hypervlab.co.uk\/?p=2500","url":"https:\/\/hypervlab.co.uk\/?p=2500","name":"AutoPilot - Hybrid Machine to Intune Enrollment - HypervLAB","isPartOf":{"@id":"https:\/\/hypervlab.co.uk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hypervlab.co.uk\/?p=2500#primaryimage"},"image":{"@id":"https:\/\/hypervlab.co.uk\/?p=2500#primaryimage"},"thumbnailUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png","datePublished":"2020-12-02T23:13:39+00:00","dateModified":"2021-12-10T14:33:08+00:00","author":{"@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359"},"breadcrumb":{"@id":"https:\/\/hypervlab.co.uk\/?p=2500#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hypervlab.co.uk\/?p=2500"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/?p=2500#primaryimage","url":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png","contentUrl":"https:\/\/hypervlab.co.uk\/wp-content\/uploads\/2020\/12\/FeatureImage_AutoPilot_HybridMDM.png","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/hypervlab.co.uk\/?p=2500#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/hypervlab.co.uk\/"},{"@type":"ListItem","position":2,"name":"AutoPilot – Hybrid Machine to Intune Enrollment"}]},{"@type":"WebSite","@id":"https:\/\/hypervlab.co.uk\/#website","url":"https:\/\/hypervlab.co.uk\/","name":"HypervLAB","description":"Blogging about all thing Microsoft","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hypervlab.co.uk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/7d184970612a9c6a5f1babb8b6b4d359","name":"Simon Lee","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/hypervlab.co.uk\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9473a3cf9c75192508eccfd9d072efab80adf04a45083e561d0e3065f681c34c?s=96&d=mm&r=g","caption":"Simon Lee"},"description":"Hi, I'm Simon an IT Enthusiast, PowerShell Geek, Gamer, and Sound Engineer. I've been working with in the IT Industry for around 6 years and have worked across private and public sector companies. The original idea behind \"hypervlab\" was that I required an 'RnD' environment which would allow me to be able to replicate any kind of enterprise on-premise environment which I could use for learning and testing without learning in a production environment. So in 2019, I decided to branch out and use the domain for a public facing blog to be able to contribute to the IT Community about all things Microsoft.","sameAs":["https:\/\/hypervlab.co.uk","https:\/\/www.linkedin.com\/in\/simon-john-lee\/","https:\/\/x.com\/https:\/\/twitter.com\/smoon_lee"],"url":"https:\/\/hypervlab.co.uk\/?author=2"}]}},"_links":{"self":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2500"}],"version-history":[{"count":0,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/2500\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=\/wp\/v2\/media\/2501"}],"wp:attachment":[{"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hypervlab.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}