Allow joining Windows 365 Link to Microsoft Entra

As the first step in setting up your organization's environment to support Windows 365 Link, you must allow Windows 365 Link devices to join Microsoft Entra.

Before signing in, the user must have permission to join and not be blocked by any Intune device enrollment restrictions.

The first time the device is powered on, the Out of Box Experience (OOBE):

  1. Prompts the user to sign in.
  2. Joins the device to their tenant.

To set permissions to allow your organization's users to join their Windows 365 Link to Microsoft Entra, follow these steps:

  1. Sign in to the Microsoft Entra admin center > Identity > Devices > Overview > Device Settings.

  2. Under Users may join devices to Microsoft Entra, select either All or Selected:

    • All: All users can join their devices to Microsoft Entra ID.
    • Selected: Only users specified under Selected can join devices to Microsoft Entra ID. Selected groups must be a Microsoft Entra group that contains user objects.
  3. Make sure that Maximum number of devices per user is set to a reasonable value that doesn't prevent users from joining new devices. The default maximum is 50 and applies to all users, including device enrollment managers.

  4. Select Save.

For more about configuring device settings for Microsoft Entra ID, see Configure your device settings.

For full information about planning your join implementation, see How to: Plan your Microsoft Entra join implementation.

Next steps

Enable automatic enrollment.