mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-17 19:33:37 +00:00
[BULK] - DocuTune - Rebranding of Azure Active Dir
This commit is contained in:
Alex Buck
@ -8,7 +8,7 @@ ms.topic: tutorial
|
||||
# Configure settings and applications with Microsoft Intune
|
||||
|
||||
Before distributing devices to your users, you must ensure that the devices will be configured with the required policies, settings, and applications as they get enrolled in Intune.
|
||||
Microsoft Intune uses Azure AD groups to assign policies and applications to devices.
|
||||
Microsoft Intune uses Microsoft Entra groups to assign policies and applications to devices.
|
||||
With Microsoft Intune for Education, you can conveniently create groups and assign policies and applications to them.
|
||||
|
||||
In this section you will:
|
||||
@ -55,4 +55,4 @@ With the groups created, you can configure policies and applications to deploy t
|
||||
|
||||
[EDU-1]: /intune-education/create-groups
|
||||
[EDU-2]: /intune-education/edit-groups-intune-for-edu
|
||||
[EDU-3]: /intune-education/edit-groups-intune-for-edu#edit-dynamic-group-rules
|
||||
[EDU-3]: /intune-education/edit-groups-intune-for-edu#edit-dynamic-group-rules
|
||||
|
||||
@ -1,20 +1,20 @@
|
||||
---
|
||||
title: Enrollment in Intune with standard out-of-box experience (OOBE)
|
||||
description: Learn how to join devices to Azure AD from OOBE and automatically get them enrolled in Intune.
|
||||
description: Learn how to join devices to Microsoft Entra ID from OOBE and automatically get them enrolled in Intune.
|
||||
ms.date: 08/31/2022
|
||||
ms.topic: tutorial
|
||||
---
|
||||
# Automatic Intune enrollment via Azure AD join
|
||||
# Automatic Intune enrollment via Microsoft Entra join
|
||||
|
||||
If you're setting up a Windows device individually, you can use the out-of-box experience to join it to your school's Azure Active Directory tenant, and automatically enroll it in Intune.
|
||||
If you're setting up a Windows device individually, you can use the out-of-box experience to join it to your school's Microsoft Entra tenant, and automatically enroll it in Intune.
|
||||
With this process, no advance preparation is needed:
|
||||
|
||||
1. Follow the on-screen prompts for region selection, keyboard selection, and network connection
|
||||
1. Wait for updates. If any updates are available, they'll be installed at this time
|
||||
:::image type="content" source="./images/win11-oobe-updates.png" alt-text="Windows 11 OOBE - updates page" border="true":::
|
||||
1. When prompted, select **Set up for work or school** and authenticate using your school's Azure Active Directory account
|
||||
1. When prompted, select **Set up for work or school** and authenticate using your school's Microsoft Entra account
|
||||
:::image type="content" source="./images/win11-oobe-auth.png" alt-text="Windows 11 OOBE - authentication page" border="true":::
|
||||
1. The device will join Azure AD and automatically enroll in Intune. All settings defined in Intune will be applied to the device
|
||||
1. The device will join Microsoft Entra ID and automatically enroll in Intune. All settings defined in Intune will be applied to the device
|
||||
|
||||
> [!IMPORTANT]
|
||||
> If you configured enrollment restrictions in Intune blocking personal Windows devices, this process will not complete. You will need to use a different enrollment method, or ensure that the devices are registered in Autopilot.
|
||||
@ -24,7 +24,7 @@ With this process, no advance preparation is needed:
|
||||
________________________________________________________
|
||||
## Next steps
|
||||
|
||||
With the devices joined to Azure AD tenant and managed by Intune, you can use Intune to maintain them and report on their status.
|
||||
With the devices joined to Microsoft Entra tenant and managed by Intune, you can use Intune to maintain them and report on their status.
|
||||
|
||||
> [!div class="nextstepaction"]
|
||||
> [Next: Manage devices >](manage-overview.md)
|
||||
> [Next: Manage devices >](manage-overview.md)
|
||||
|
||||
@ -1,6 +1,6 @@
|
||||
---
|
||||
title: Enrollment in Intune with Windows Autopilot
|
||||
description: Learn how to join Azure AD and enroll in Intune using Windows Autopilot.
|
||||
description: Learn how to join Microsoft Entra ID and enroll in Intune using Windows Autopilot.
|
||||
ms.date: 03/08/2023
|
||||
ms.topic: tutorial
|
||||
---
|
||||
@ -61,8 +61,8 @@ More advanced dynamic membership rules can be created from Microsoft Intune admi
|
||||
|
||||
For Autopilot devices to offer a customized OOBE experience, you must create **Windows Autopilot deployment profiles** and assign them to a group containing the devices.
|
||||
A deployment profile is a collection of settings that determine the behavior of the device during OOBE. Among other settings, a deployment profile specifies a **deployment mode**, which can either be:
|
||||
1. **User-driven:** devices with this profile are associated with the user enrolling the device. User credentials are required to complete the Azure AD join process during OOBE
|
||||
1. **Self-deploying:** devices with this profile aren't associated with the user enrolling the device. User credentials aren't required to complete the Azure AD join process. Rather, the device is joined automatically and, for this reason, specific hardware requirements must be met to use this mode.
|
||||
1. **User-driven:** devices with this profile are associated with the user enrolling the device. User credentials are required to complete the Microsoft Entra join process during OOBE
|
||||
1. **Self-deploying:** devices with this profile aren't associated with the user enrolling the device. User credentials aren't required to complete the Microsoft Entra join process. Rather, the device is joined automatically and, for this reason, specific hardware requirements must be met to use this mode.
|
||||
|
||||
To create an Autopilot deployment profile:
|
||||
|
||||
@ -109,8 +109,8 @@ When a Windows device is turned on for the first time, the end-user experience w
|
||||
1. Connect to the internet: if connecting through Wi-Fi, the user will be prompted to connect to a wireless network. If the device is connected through an ethernet cable, Windows will skip this step
|
||||
1. Apply updates: the device will look for and apply required updates
|
||||
1. Windows will detect if the device has an Autopilot profile assigned to it. If so, it will proceed with the customized OOBE experience. If the Autopilot profile specifies a naming convention for the device, the device will be renamed, and a reboot will occur
|
||||
1. The user authenticates to Azure AD, using the school account
|
||||
1. The device joins Azure AD, enrolls in Intune and all the settings and applications are configured
|
||||
1. The user authenticates to Microsoft Entra ID, using the school account
|
||||
1. The device joins Microsoft Entra ID, enrolls in Intune and all the settings and applications are configured
|
||||
|
||||
> [!NOTE]
|
||||
> Some of these steps may be skipped, depending on the Autopilot profile configuration and if the device is using a wired connection.
|
||||
@ -120,7 +120,7 @@ When a Windows device is turned on for the first time, the end-user experience w
|
||||
________________________________________________________
|
||||
## Next steps
|
||||
|
||||
With the devices joined to Azure AD tenant and managed by Intune, you can use Intune to maintain them and report on their status.
|
||||
With the devices joined to Microsoft Entra tenant and managed by Intune, you can use Intune to maintain them and report on their status.
|
||||
|
||||
> [!div class="nextstepaction"]
|
||||
> [Next: Manage devices >](manage-overview.md)
|
||||
@ -146,4 +146,4 @@ With the devices joined to Azure AD tenant and managed by Intune, you can use In
|
||||
[EDU-2]: /intune-education/windows-11-se-overview#windows-autopilot
|
||||
[EDU-3]: ../tutorial-deploy-apps-winse/considerations.md#enrollment-status-page
|
||||
|
||||
[SURF-1]: /surface/surface-autopilot-registration-support
|
||||
[SURF-1]: /surface/surface-autopilot-registration-support
|
||||
|
||||
@ -7,10 +7,10 @@ ms.topic: overview
|
||||
|
||||
# Device enrollment overview
|
||||
|
||||
There are three main methods for joining Windows devices to Azure AD and getting them enrolled and managed by Intune:
|
||||
There are three main methods for joining Windows devices to Microsoft Entra ID and getting them enrolled and managed by Intune:
|
||||
|
||||
- **Automatic Intune enrollment via Azure AD join** happens when a user first turns on a device that is in out-of-box experience (OOBE), and selects the option to join Azure AD. In this scenario, the user can customize certain Windows functionalities before reaching the desktop, and becomes a local administrator of the device. This option isn't an ideal enrollment method for education devices
|
||||
- **Bulk enrollment with provisioning packages.** Provisioning packages are files that can be used to set up Windows devices, and can include information to connect to Wi-Fi networks and to join an Azure AD tenant. Provisioning packages can be created using either **Set Up School PCs** or **Windows Configuration Designer** applications. These files can be applied during or after the out-of-box experience
|
||||
- **Automatic Intune enrollment via Microsoft Entra join** happens when a user first turns on a device that is in out-of-box experience (OOBE), and selects the option to join Microsoft Entra ID. In this scenario, the user can customize certain Windows functionalities before reaching the desktop, and becomes a local administrator of the device. This option isn't an ideal enrollment method for education devices
|
||||
- **Bulk enrollment with provisioning packages.** Provisioning packages are files that can be used to set up Windows devices, and can include information to connect to Wi-Fi networks and to join a Microsoft Entra tenant. Provisioning packages can be created using either **Set Up School PCs** or **Windows Configuration Designer** applications. These files can be applied during or after the out-of-box experience
|
||||
- **Enrollment via Windows Autopilot.** Windows Autopilot is a collection of cloud services to configure the out-of-box experience, enabling light-touch or zero-touch deployment scenarios. Windows Autopilot simplifies the Windows device lifecycle, from initial deployment to end of life, for OEMs, resellers, IT administrators and end users
|
||||
|
||||
## Choose the enrollment method
|
||||
@ -22,7 +22,7 @@ This [table][INT-1] describes the ideal scenarios for using either option. It's
|
||||
|
||||
Select one of the following options to learn the next steps about the enrollment method you chose:
|
||||
> [!div class="op_single_selector"]
|
||||
> - [Automatic Intune enrollment via Azure AD join](enroll-aadj.md)
|
||||
> - [Automatic Intune enrollment via Microsoft Entra join](enroll-aadj.md)
|
||||
> - [Bulk enrollment with provisioning packages](enroll-package.md)
|
||||
> - [Enroll devices with Windows Autopilot ](enroll-autopilot.md)
|
||||
|
||||
|
||||
@ -17,7 +17,7 @@ You can create provisioning packages using either **Set Up School PCs** or **Win
|
||||
|
||||
## Set up School PCs
|
||||
|
||||
With Set up School PCs, you can create a package containing the most common device configurations that students need, and enroll devices in Intune. The package is saved on a USB stick, which can then be plugged into devices during OOBE. Applications and settings will be automatically applied to the devices, including the Azure AD join and Intune enrollment process.
|
||||
With Set up School PCs, you can create a package containing the most common device configurations that students need, and enroll devices in Intune. The package is saved on a USB stick, which can then be plugged into devices during OOBE. Applications and settings will be automatically applied to the devices, including the Microsoft Entra join and Intune enrollment process.
|
||||
|
||||
### Create a provisioning package
|
||||
|
||||
@ -44,7 +44,7 @@ For more information, see [Install Windows Configuration Designer][WIN-1], which
|
||||
|
||||
## Enroll devices with the provisioning package
|
||||
|
||||
To provision Windows devices with provisioning packages, insert the USB stick containing the package during the out-of-box experience. The devices will read the content of the package, join Azure AD and automatically enroll in Intune.
|
||||
To provision Windows devices with provisioning packages, insert the USB stick containing the package during the out-of-box experience. The devices will read the content of the package, join Microsoft Entra ID and automatically enroll in Intune.
|
||||
All settings defined in the package and in Intune will be applied to the device, and the device will be ready to use.
|
||||
|
||||
:::image type="content" source="./images/win11-oobe-ppkg.gif" alt-text="Windows 11 OOBE - enrollment with provisioning package animation." border="false":::
|
||||
@ -52,7 +52,7 @@ All settings defined in the package and in Intune will be applied to the device,
|
||||
________________________________________________________
|
||||
## Next steps
|
||||
|
||||
With the devices joined to Azure AD tenant and managed by Intune, you can use Intune to maintain them and report on their status.
|
||||
With the devices joined to Microsoft Entra tenant and managed by Intune, you can use Intune to maintain them and report on their status.
|
||||
|
||||
> [!div class="nextstepaction"]
|
||||
> [Next: Manage devices >](manage-overview.md)
|
||||
@ -61,4 +61,4 @@ With the devices joined to Azure AD tenant and managed by Intune, you can use In
|
||||
|
||||
[EDU-1]: /education/windows/use-set-up-school-pcs-app
|
||||
|
||||
[WIN-1]: /windows/configuration/provisioning-packages/provisioning-install-icd
|
||||
[WIN-1]: /windows/configuration/provisioning-packages/provisioning-install-icd
|
||||
|
||||
@ -46,7 +46,7 @@ From enrollment, through configuration and protection, to resetting, Intune for
|
||||
|
||||
:::image type="content" source="./images/device-lifecycle.png" alt-text="The device lifecycle for Intune-managed devices" border="false":::
|
||||
|
||||
- **Enroll:** to enable remote device management, devices must be enrolled in Intune with an account in your Azure AD tenant. Some enrollment methods require an IT administrator to initiate enrollment, while others require students to complete the initial device setup process. This document discusses the facets of various device enrollment methodologies
|
||||
- **Enroll:** to enable remote device management, devices must be enrolled in Intune with an account in your Microsoft Entra tenant. Some enrollment methods require an IT administrator to initiate enrollment, while others require students to complete the initial device setup process. This document discusses the facets of various device enrollment methodologies
|
||||
- **Configure:** once the devices are enrolled in Intune, applications and settings will be applied, as defined by the IT administrator
|
||||
- **Protect and manage:** in addition to its configuration capabilities, Intune for Education helps protect devices from unauthorized access or malicious attacks. For example, adding an extra layer of authentication with Windows Hello can make devices more secure. Policies are available that let you control settings for Windows Firewall, Endpoint Protection, and software updates
|
||||
- **Retire:** when it's time to repurpose a device, Intune for Education offers several options, including resetting the device, removing it from management, or wiping school data. In this document, we cover different device return and exchange scenarios
|
||||
@ -55,7 +55,7 @@ From enrollment, through configuration and protection, to resetting, Intune for
|
||||
|
||||
In the remainder of this document, we'll discuss the key concepts and benefits of modern device management with Microsoft 365 solutions for education. The guidance is organized around the four main pillars of modern device management:
|
||||
|
||||
- **Identity management:** setting up and configuring the identity system, with Microsoft 365 Education and Azure Active Directory, as the foundation for user identity and authentication
|
||||
- **Identity management:** setting up and configuring the identity system, with Microsoft 365 Education and Microsoft Entra ID, as the foundation for user identity and authentication
|
||||
- **Initial setup:** setting up the Intune for Education environment for managing devices, including configuring settings, deploying applications, and defining updates cadence
|
||||
- **Device enrollment:** Setting up Windows devices for deployment and enrolling them in Intune for Education
|
||||
- **Device reset:** Resetting managed devices with Intune for Education
|
||||
@ -63,10 +63,10 @@ In the remainder of this document, we'll discuss the key concepts and benefits o
|
||||
________________________________________________________
|
||||
## Next steps
|
||||
|
||||
Let's begin with the creation and configuration of your Azure AD tenant and Intune environment.
|
||||
Let's begin with the creation and configuration of your Microsoft Entra tenant and Intune environment.
|
||||
|
||||
> [!div class="nextstepaction"]
|
||||
> [Next: Set up Azure Active Directory >](set-up-azure-ad.md)
|
||||
> [Next: Set up Microsoft Entra ID >](set-up-azure-ad.md)
|
||||
|
||||
<!-- Reference links in article -->
|
||||
|
||||
@ -76,4 +76,4 @@ Let's begin with the creation and configuration of your Azure AD tenant and Intu
|
||||
[MEM-4]: /mem/autopilot/windows-autopilot
|
||||
[MEM-5]: /mem/autopilot/dfci-management
|
||||
|
||||
[INT-1]: /intune-education/what-is-intune-for-education
|
||||
[INT-1]: /intune-education/what-is-intune-for-education
|
||||
|
||||
@ -86,7 +86,7 @@ There are scenarios that require a device to be deleted from your tenant, for ex
|
||||
|
||||
1. If possible, perform a **factory reset (wipe)** of the device. If the device can't be wiped, delete the device from Intune using [these steps][MEM-1]
|
||||
1. If the device is registered in Autopilot, delete the Autopilot object using [these steps][MEM-2]
|
||||
1. Delete the device from Azure Active Directory using [these steps][MEM-3]
|
||||
1. Delete the device from Microsoft Entra ID using [these steps][MEM-3]
|
||||
|
||||
## Autopilot considerations for a motherboard replacement scenario
|
||||
|
||||
|
||||
@ -1,16 +1,16 @@
|
||||
---
|
||||
title: Set up Azure Active Directory
|
||||
description: Learn how to create and prepare your Azure AD tenant for an education environment.
|
||||
title: Set up Microsoft Entra ID
|
||||
description: Learn how to create and prepare your Microsoft Entra tenant for an education environment.
|
||||
ms.date: 08/31/2022
|
||||
ms.topic: tutorial
|
||||
appliesto:
|
||||
---
|
||||
|
||||
# Set up Azure Active Directory
|
||||
# Set up Microsoft Entra ID
|
||||
|
||||
The Microsoft platform for education simplifies the management of Windows devices with Intune for Education and Microsoft 365 Education. The first, fundamental step, is to configure the identity infrastructure to manage user access and permissions for your school.
|
||||
|
||||
Azure Active Directory (Azure AD), which is included with the Microsoft 365 Education subscription, provides authentication and authorization to any Microsoft cloud services. Identity objects are defined in Azure AD for human identities, like students and teachers, as well as non-human identities, like devices, services, and applications. Once users get Microsoft 365 licenses assigned, they'll be able to consume services and access resources within the tenant. With Microsoft 365 Education, you can manage identities for your teachers and students, assign licenses to devices and users, and create groups for the classrooms.
|
||||
Microsoft Entra ID, which is included with the Microsoft 365 Education subscription, provides authentication and authorization to any Microsoft cloud services. Identity objects are defined in Microsoft Entra ID for human identities, like students and teachers, as well as non-human identities, like devices, services, and applications. Once users get Microsoft 365 licenses assigned, they'll be able to consume services and access resources within the tenant. With Microsoft 365 Education, you can manage identities for your teachers and students, assign licenses to devices and users, and create groups for the classrooms.
|
||||
|
||||
In this section you will:
|
||||
> [!div class="checklist"]
|
||||
@ -31,7 +31,7 @@ For more information, see [Create your Office 365 tenant account][M365-1]
|
||||
|
||||
The **Microsoft 365 admin center** is the hub for all administrative consoles for the Microsoft 365 cloud. To access the <a href="https://entra.microsoft.com" target="_blank"><u>Microsoft Entra admin center</u></a>, sign in with the same global administrator account when you [created the Microsoft 365 tenant](#create-a-microsoft-365-tenant).
|
||||
|
||||
From the Microsoft 365 admin center, you can access different administrative dashboards: Azure Active Directory, Microsoft Intune, Intune for Education, and others:
|
||||
From the Microsoft 365 admin center, you can access different administrative dashboards: Microsoft Entra ID, Microsoft Intune, Intune for Education, and others:
|
||||
|
||||
:::image type="content" source="./images/m365-admin-center.png" alt-text="*All admin centers* page in *Microsoft 365 admin center*" lightbox="./images/m365-admin-center.png" border="true":::
|
||||
|
||||
@ -45,7 +45,7 @@ For more information, see [Overview of the Microsoft 365 admin center][M365-2].
|
||||
With the Microsoft 365 tenant in place, it's time to add users, create groups, and assign licenses. All students and teachers need a user account before they can sign in and access the different Microsoft 365 services. There are multiple ways to do this, including using School Data Sync (SDS), synchronizing an on-premises Active Directory, manually, or a combination of the above.
|
||||
|
||||
> [!NOTE]
|
||||
> Synchronizing your Student Information System (SIS) with School Data Sync is the preferred way to create students and teachers as users in a Microsoft 365 Education tenant. However, if you want to integrate an on-premises directory and synchronize accounts to the cloud, skip to [<u>Azure Active Directory sync</u>](#azure-active-directory-sync) below.
|
||||
> Synchronizing your Student Information System (SIS) with School Data Sync is the preferred way to create students and teachers as users in a Microsoft 365 Education tenant. However, if you want to integrate an on-premises directory and synchronize accounts to the cloud, skip to [<u>Azure Active Directory Sync</u>](#azure-active-directory-sync) below.
|
||||
|
||||
### School Data Sync
|
||||
|
||||
@ -61,9 +61,9 @@ For more information, see [Overview of School Data Sync][SDS-1].
|
||||
>
|
||||
> Remember that you should typically deploy test SDS data (users, groups, and so on) in a separate test tenant, not your school production environment.
|
||||
|
||||
### Azure Active Directory sync
|
||||
### Azure Active Directory Sync
|
||||
|
||||
To integrate an on-premises directory with Azure Active Directory, you can use **Microsoft Azure Active Directory Connect** to synchronize users, groups, and other objects. Azure AD Connect lets you configure the authentication method appropriate for your school, including:
|
||||
To integrate an on-premises directory with Microsoft Entra ID, you can use **Microsoft Entra Connect** to synchronize users, groups, and other objects. Microsoft Entra Connect lets you configure the authentication method appropriate for your school, including:
|
||||
|
||||
- [Password hash synchronization][AAD-1]
|
||||
- [Pass-through authentication][AAD-2]
|
||||
@ -79,11 +79,11 @@ There are two options for adding users manually, either individually or in bulk:
|
||||
|
||||
1. To add students and teachers as users in Microsoft 365 Education *individually*:
|
||||
- Sign in to the <a href="https://entra.microsoft.com" target="_blank"><b>Microsoft Entra admin center</b></a>
|
||||
- Select **Azure Active Directory** > **Users** > **All users** > **New user** > **Create new user**
|
||||
- Select **Microsoft Entra ID** > **Users** > **All users** > **New user** > **Create new user**
|
||||
For more information, see [Add users and assign licenses at the same time][M365-3].
|
||||
1. To add *multiple* users to Microsoft 365 Education:
|
||||
- Sign in to the <a href="https://entra.microsoft.com" target="_blank"><b>Microsoft Entra admin center</b></a>
|
||||
- Select **Azure Active Directory** > **Users** > **All users** > **Bulk operations** > **Bulk create**
|
||||
- Select **Microsoft Entra ID** > **Users** > **All users** > **Bulk operations** > **Bulk create**
|
||||
|
||||
For more information, see [Add multiple users in the Microsoft 365 admin center][M365-4].
|
||||
### Create groups
|
||||
@ -91,7 +91,7 @@ For more information, see [Add multiple users in the Microsoft 365 admin center]
|
||||
Creating groups is important to simplify multiple tasks, like assigning licenses, delegating administration, deploy settings, applications or to distribute assignments to students. To create groups:
|
||||
|
||||
1. Sign in to the <a href="https://entra.microsoft.com" target="_blank"><b>Microsoft Entra admin center</b></a>
|
||||
1. Select **Azure Active Directory** > **Groups** > **All groups** > **New group**
|
||||
1. Select **Microsoft Entra ID** > **Groups** > **All groups** > **New group**
|
||||
1. On the **New group** page, select **Group type** > **Security**
|
||||
1. Provide a group name and add members, as needed
|
||||
1. Select **Next**
|
||||
@ -100,18 +100,18 @@ For more information, see [Create a group in the Microsoft 365 admin center][M36
|
||||
|
||||
### Assign licenses
|
||||
|
||||
The recommended way to assign licenses is through group-based licensing. With this method, Azure AD ensures that licenses are assigned to all members of the group. Any new members who join the group are assigned the appropriate licenses, and when members leave, their licenses are removed.
|
||||
The recommended way to assign licenses is through group-based licensing. With this method, Microsoft Entra ID ensures that licenses are assigned to all members of the group. Any new members who join the group are assigned the appropriate licenses, and when members leave, their licenses are removed.
|
||||
|
||||
To assign a license to a group:
|
||||
|
||||
1. Sign in to the <a href="https://entra.microsoft.com" target="_blank"><b>Microsoft Entra admin center</b></a>
|
||||
1. Select **Azure Active Directory** > **Show More** > **Billing** > **Licenses**
|
||||
1. Select **Microsoft Entra ID** > **Show More** > **Billing** > **Licenses**
|
||||
1. Select the required products that you want to assign licenses for > **Assign**
|
||||
1. Add the groups to which the licenses should be assigned
|
||||
|
||||
:::image type="content" source="images/entra-assign-licenses.png" alt-text="Assign licenses from Microsoft Entra admin center." lightbox="images/entra-assign-licenses.png":::
|
||||
|
||||
For more information, see [Group-based licensing using Azure AD admin center][AAD-4].
|
||||
For more information, see [Group-based licensing using Microsoft Entra admin center][AAD-4].
|
||||
|
||||
## Configure school branding
|
||||
|
||||
@ -120,26 +120,26 @@ Configuring your school branding enables a more familiar Autopilot experience to
|
||||
To configure your school's branding:
|
||||
|
||||
1. Sign in to the <a href="https://entra.microsoft.com" target="_blank"><b>Microsoft Entra admin center</b></a>
|
||||
1. Select **Azure Active Directory** > **Show More** > **User experiences** > **Company branding**
|
||||
1. Select **Microsoft Entra ID** > **Show More** > **User experiences** > **Company branding**
|
||||
1. You can specify brand settings like background image, logo, username hint and a sign-in page text
|
||||
:::image type="content" source="images/entra-branding.png" alt-text="Configure Azure AD branding from Microsoft Entra admin center." lightbox="images/entra-branding.png":::
|
||||
1. To adjust the school tenant's name displayed during OOBE, select **Azure Active Directory** > **Overview** > **Properties**
|
||||
:::image type="content" source="images/entra-branding.png" alt-text="Configure Microsoft Entra ID branding from Microsoft Entra admin center." lightbox="images/entra-branding.png":::
|
||||
1. To adjust the school tenant's name displayed during OOBE, select **Microsoft Entra ID** > **Overview** > **Properties**
|
||||
1. In the **Name** field, enter the school district or organization's name > **Save**
|
||||
:::image type="content" alt-text="Configure Azure AD tenant name from Microsoft Entra admin center." source="images/entra-tenant-name.png" lightbox="images/entra-tenant-name.png":::
|
||||
:::image type="content" alt-text="Configure Microsoft Entra tenant name from Microsoft Entra admin center." source="images/entra-tenant-name.png" lightbox="images/entra-tenant-name.png":::
|
||||
|
||||
For more information, see [Add branding to your directory][AAD-5].
|
||||
|
||||
## Enable bulk enrollment
|
||||
|
||||
If you decide to enroll Windows devices using provisioning packages instead of Windows Autopilot, you must ensure that the provisioning packages can join Windows devices to the Azure AD tenant.
|
||||
If you decide to enroll Windows devices using provisioning packages instead of Windows Autopilot, you must ensure that the provisioning packages can join Windows devices to the Microsoft Entra tenant.
|
||||
|
||||
To allow provisioning packages to complete the Azure AD Join process:
|
||||
To allow provisioning packages to complete the Microsoft Entra join process:
|
||||
|
||||
1. Sign in to the <a href="https://entra.microsoft.com" target="_blank"><b>Microsoft Entra admin center</b></a>
|
||||
1. Select **Azure Active Directory** > **Devices** > **Device Settings**
|
||||
1. Under **Users may join devices to Azure AD**, select **All**
|
||||
1. Select **Microsoft Entra ID** > **Devices** > **Device Settings**
|
||||
1. Under **Users may join devices to Microsoft Entra ID**, select **All**
|
||||
> [!NOTE]
|
||||
> If it is required that only specific users can join devices to Azure AD, select **Selected**. Ensure that the user account that will create provisioning packages is included in the list of users.
|
||||
> If it is required that only specific users can join devices to Microsoft Entra ID, select **Selected**. Ensure that the user account that will create provisioning packages is included in the list of users.
|
||||
1. Select Save
|
||||
:::image type="content" source="images/entra-device-settings.png" alt-text="Configure device settings from Microsoft Entra admin center." lightbox="images/entra-device-settings.png":::
|
||||
|
||||
|
||||
@ -3,7 +3,7 @@ items:
|
||||
href: index.md
|
||||
- name: 1. Prepare your tenant
|
||||
items:
|
||||
- name: Set up Azure Active Directory
|
||||
- name: Set up Microsoft Entra ID
|
||||
href: set-up-azure-ad.md
|
||||
- name: Set up Microsoft Intune
|
||||
href: set-up-microsoft-intune.md
|
||||
@ -19,7 +19,7 @@ items:
|
||||
items:
|
||||
- name: Overview
|
||||
href: enroll-overview.md
|
||||
- name: Enroll devices via Azure AD join
|
||||
- name: Enroll devices via Microsoft Entra join
|
||||
href: enroll-aadj.md
|
||||
- name: Enroll devices with provisioning packages
|
||||
href: enroll-package.md
|
||||
|
||||
Reference in New Issue
Block a user