question

stavrosmitchell-6182 avatar image
0 Votes"
stavrosmitchell-6182 asked CiciWu-MSFT published

Non AD Joined Computers

Hey Everyone i have a customer that would like to get into intune. they have approximately 100 stores with roughly 10-15 computers a store. All of them are not joined to the domain and have an auto login.
What would be the best way to get them enrolled into intune?
I am thinking of using a DEM account to do this would that work and have you had any experience on this?

Any other suggestions would be appreciated

thanks

mem-intune-enrollment
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CiciWu-MSFT avatar image
0 Votes"
CiciWu-MSFT answered CiciWu-MSFT published

DEM enrollment is the recommended way for your scenario. You can enroll up to 1,000 mobile devices with a single Azure Active Directory account by using a device enrollment manager (DEM) account. DEM is an Intune permission that can be applied to an AAD user account and lets the user enroll up to 1,000 devices. A DEM account is useful for scenarios where devices are enrolled and prepared before handing them out to the users of the devices. See the detailed information of DEM enrollment:

https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thank you for the reply just some follow up questions,
What would be the issues if the devices are already set up and running?
Are there any limitation on configuration or policies that I can set up example updates rings
For license does each computer need an intune device license or the dem intune license is all that is needed

thanks

0 Votes 0 ·
CiciWu-MSFT avatar image CiciWu-MSFT stavrosmitchell-6182 ·
  1. You can enroll device with DEM account when devices are already set up and running. DEM enrollment doesn’t need to rest device.

  2. There is no limitation on configuration or policies for updates rings. All the limitations for DEM enrollment have been list here.
    https://docs.microsoft.com/en-us/mem/intune/enrollment/device-enrollment-manager-enroll#limitations-of-devices-that-are-enrolled-with-a-dem-account

  3. Every device enrolled with DEM accounts needs to be properly licensed to be managed by Intune. The license could be an Intune user license or an Intune device license


0 Votes 0 ·

I am just writing to see if this issue has any update. Also, for the problem, is there any other assistance we could provide?

0 Votes 0 ·
NickHogarth-MVP avatar image
0 Votes"
NickHogarth-MVP answered stavrosmitchell-6182 commented

Just note though if you enroll with a DEM account, the DEM account is the primary user for the device (last time I checked). If you want to target apps/policies to users, then you will need to change the primary user

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thanks for the answer,

0 Votes 0 ·