Intune Enrollment for Entra Joined Devices
Purpose
This solution is built to enroll the intune on the Entra AD joined devices.
Associated Content
| Content | Type | Function |
|---|---|---|
| Intune Enrollment for Entra Joined Devices | Script | The script automates the Microsoft Intune enrollment process for Entra joined Windows devices. |
| IntuneEnrolled | Role | This document outlines the process for determining whether a Windows machine is enrolled in Intune, including the necessary detection string and implementation steps for importing the role into the system. |
| Microsoft - Entra Joined | Role | This document provides details on detecting Entra joined machines using a specific PowerShell command. It includes the detection string, the comparator used, and the applicable operating systems. Understanding this detection mechanism is essential for managing Azure AD (Entra) environments effectively. |
| Intune Enrollment | Internal Monitor | This monitor is built to detect the agent that is Entra Joined and doesn't have Intune enrolled. This depends on EDF Deploy Intune Enrollment being checked at the client level, whereas the EDFs Exclude Intune Enrollment should not be checked at the location or computer level. |
| △ Custom - Execute Script - Intune Enrollment | Alert Template | This alert template is created to run the autofix Script - Intune Enrollment for Entra Joined Devices detected on the agents via a Monitor - ProVal Production - Intune Enrollment |
EDFs
| Name | Type | Level | Section | Editable | Required | Description |
|---|---|---|---|---|---|---|
Deploy Intune Enrollment | Checkbox | Client | Entra AD | Yes | True | This client level checkbox EDF is required for the automation of the Intune Enrollment deployment. |
Exclude Intune Enrollment | Checkbox | Location | Exclusions | Yes | False | If checked, then the agents of the location will be excluded from the Intune enrollment auto-deployment. |
Exclude Intune Enrollment | Checkbox | Computer | Exclusions | Yes | False | If checked, then the agent will be excluded from the Intune enrollment auto-deployment. |
Implementation
- Import the Script - Intune Enrollment for Entra Joined Devices.
- Import the Role - IntuneEnrolled
- Import the Role - Microsoft - Entra Joined
- Import the Monitor - Intune Enrollment
- Import the Alert Template - △ Custom - Execute Script - Intune Enrollment
- Navigate to the Automation > Monitors > Internal Monitors Double click the Monitor - Intune Enrollment to open. Set the Alerting Alert Template - △ Custom - Execute Script - Intune Enrollment that will run the autofix script Intune Enrollment for Entra Joined Devices.
Changelog
2026-10-27
- Initial version of the document