Skip to main content

Intune Enrollment for Entra Joined Devices

Purpose​

This solution is built to enroll the intune on the Entra AD joined devices.

Associated Content​

ContentTypeFunction
Intune Enrollment for Entra Joined DevicesScriptThe script automates the Microsoft Intune enrollment process for Entra joined Windows devices.
IntuneEnrolledRoleThis document outlines the process for determining whether a Windows machine is enrolled in Intune, including the necessary detection string and implementation steps for importing the role into the system.
Microsoft - Entra JoinedRoleThis document provides details on detecting Entra joined machines using a specific PowerShell command. It includes the detection string, the comparator used, and the applicable operating systems. Understanding this detection mechanism is essential for managing Azure AD (Entra) environments effectively.
Intune EnrollmentInternal MonitorThis monitor is built to detect the agent that is Entra Joined and doesn't have Intune enrolled. This depends on EDF Deploy Intune Enrollment being checked at the client level, whereas the EDFs Exclude Intune Enrollment should not be checked at the location or computer level.
△ Custom - Execute Script - Intune EnrollmentAlert TemplateThis alert template is created to run the autofix Script - Intune Enrollment for Entra Joined Devices detected on the agents via a Monitor - ProVal Production - Intune Enrollment

EDFs​

NameTypeLevelSectionEditableRequiredDescription
Deploy Intune EnrollmentCheckboxClientEntra ADYesTrueThis client level checkbox EDF is required for the automation of the Intune Enrollment deployment.
Exclude Intune EnrollmentCheckboxLocationExclusionsYesFalseIf checked, then the agents of the location will be excluded from the Intune enrollment auto-deployment.
Exclude Intune EnrollmentCheckboxComputerExclusionsYesFalseIf checked, then the agent will be excluded from the Intune enrollment auto-deployment.

Implementation​

Changelog​

2026-10-27​

  • Initial version of the document