Windows 10 phone MDM enrolment via hybrid Intune/ConfigMgr

Robert Marshall has recently posted a great guide to get yourself up and running with an environment for Intune in ConfigMgr CB or Technical Preview http://wmug.co.uk/wmug/b/r0b/archive/2017/03/05/running-up-a-test-environment-for-intune-and-configmgr-current-branch-or-technical-preview

If you aren’t up and running with hybrid Intune as yet I suggest you take a look at this guide to get yourself into a good position.

This quick guide assumes you are already in this position and are ready to enrol. I noticed that Robert is going to show you how to enrol a iOS and Android device. So here’s a quick how-to to get your Windows 10 phone MDM enrolled.

As always, take a look at the official Microsoft TechNet documentation. I am going to be running through some of the steps within ‘Setup hybrid mobile device management (MDM) with System Center Configuration Manager and Microsoft Intune’ here as Robert has already covered the steps that get the environment set up.

Configure MDM enrolment

Login to the Azure Management Portal at https://manage.windowsazure.com.

Navigate to ‘Active Directory’ and select your Directory.

Click Applications and select ‘Microsoft Intune’

Next click ‘Configure’

Accept the default values for the URLs and specify which users’ devices should be managed by Microsoft Intune. I have selected ‘All’. Save the configuration.

Set up CNAME for enrolment

Next ensure that you have a DNS alias for device enrolment set up for your public DNS. This makes it easier for devices to be enrolled. If you are currently pointing to ‘manage.microsoft.com’ then it will no longer work for enrolment and hasn’t since February 11 2017.

You have to ensure that the following CNAME or alias is configured:

Type	Host name	Points to
CNAME	EnterpriseEnrollment.<yourdomain>	EnterpriseEnrollment-s.manage.microsoft.com

You can check if you have this set up by running the following PowerShell.

resolve-dnsname -name EnterpriseEnrollment.<yourdomain> -Type CNAME

You will get the error below if it is not set up.

Set up the CNAME accordingly wherever you manage your public DNS.

Give time for the CNAME to become live. Re-run the PowerShell command to ensure the CNAME is operational.

Set up ConfigMgr for Windows phone enrolment

In the Administration workspace, go to Cloud Services > Microsoft Intune Subscriptions. Right click and select Properties > Windows Phone.

Enable ‘Windows Phone 8.1 and Windows 10 Mobile’ and Apply.

Installing the Company Portal app and enroling the Windows 10 device

Open up the Windows Store and search for the Company Portal app and select Get.

Once installed, launch the app and tap the ‘My Devices’ message.

Tap ‘Enroll this device’

Tap ‘Connect’

Sign in at the ‘Microsoft Intune Enrollment’ screen.

Tap ‘Finished’ when set up is complete.

The device will be connected via MDM.

The device will appear in the ConfigMgr console shortly after.