User-driven Microsoft Entra join: Allow users to join devices to Microsoft Entra ID

• Koskee seuraavia::

  ✅ Windows 11, ✅ Windows 10

Autopilot user-driven Microsoft Entra join steps:

• Step 1: Set up Windows automatic Intune enrollment

• Step 2: Allow users to join devices to Microsoft Entra ID

• Step 3: Register devices as Autopilot devices
• Step 4: Create a device group
• Step 5: Configure and assign Autopilot Enrollment Status Page (ESP)
• Step 6: Create and assign Autopilot profile
• Step 7: Assign Autopilot device to a user (optional)
• Step 8: Deploy the device

For an overview of the Windows Autopilot user-driven Microsoft Entra join workflow, see Windows Autopilot user-driven Microsoft Entra join overview.

Note

If users are already allowed to join devices to Microsoft Entra ID, skip this step and move on to Step 3: Register devices as Autopilot devices.

Allow users to join devices to Microsoft Entra ID

In order for Windows Autopilot to work, users need to be allowed to join devices to Microsoft Entra ID. Allowing users to join devices to Microsoft Entra ID can be configured in the Azure portal:

1. Sign in to the Azure portal.

2. Select Microsoft Entra ID.

3. In the Overview screen, under Manage in the left hand pane, select Devices.

4. In the Devices | Overview screen, under Manage in the left hand pane, select Device Settings.

5. In the Devices | Device settings screen that opens, under Users may join devices to Microsoft Entra, select either All or Selected:

   • If All is selected, all users can join their devices to Microsoft Entra ID.

   • If Some is selected, only users specified under Selected can join their devices to Microsoft Entra ID. To add users:

     1. Select the link under Selected.

     2. In the Members allowed to join devices page that opens:

        1. Select Add.

        2. In the Add members window that opens:

           1. Select the desired users and/or groups to add.

           2. Once all of the desired users and groups are selected, select Select to close the Add members window.

        3. Select OK.

        Note

        Any selected groups must be a Microsoft Entra group that contains user objects.

6. In the Devices | Overview screen, if any changes were made, select Save.

Note

This step of allowing users to join devices to Microsoft Entra ID is only needed for the Windows Autopilot scenarios involving Microsoft Entra join. This setting doesn't apply to Windows Autopilot scenarios involving Microsoft Entra hybrid join.

Next step: Register devices as Autopilot devices

Step 3: Register devices as Autopilot devices

Related content

For more information on allowing users to join devices to Microsoft Entra ID, see the following articles:

• Configure device settings.