Integrate your Microsoft Intune device enrollment with Azure AD!

May this year Microsoft announced a new capability of automatically enroll devices in Microsoft Intune as part of joining devices in to Azure AD (Premium). By joining a Windows 10 device to Azure AD it is extremely easy for end users to get the benefits of single sign-on, OS state roaming, and management capabilities.

image

This will work with both Microsoft Intune and with 3rd party MDM solutions. In this blog post I’ll show you how ease and transparent this process is and how powerful the integration is of Microsoft Online Services and Windows 10!

Continue reading “Integrate your Microsoft Intune device enrollment with Azure AD!”

Create DNS records for Microsoft Intune including Workplace Join & Work Folders

In order to take benefit of all related services to Microsoft Intune and attached services regarding Enterprise Mobility Suite (EMS) a number of DNS records must be added in your public DNS namespace. Hereby an overview of DNS records required including their associated services.

Just to be sure yourdomain.com is used as fictive placeholder and must be replaced with your own organization (public) namespace.

Entry Type Address Purpose
enterpriseenrollment.yourdomain.com CNAME manage.microsoft.com To ease enrollment process of mobile devices
sts A Required for single-sign on (SSO) and points to your AD FS server(s)
enterpriseregistration A sts.yourdomain.com Required for Workplace Join (device registration discovery)
enterpriseregistration.yourdomain.com CNAME enterpriseregistration.windows.net Required for Azure Workplace Join (device registration discovery)
enterpriseregistration.region.yourdomain.com CNAME enterpriseregistration.windows.net Required for Azure Workplace Join (device registration discovery)
workfolders CNAME workfolders.yourdomain.com Points to your Workfolders enabled File Server(s)
discovery A discovery.yourdomain.com Required for discovery Work Folders URL