There are 2 entries in this Category.

Notes From The Field, Volume 1 – The Hybrid AD Device Management Troubleshooting Guide

I always have a rule of thumb “if it takes more than an hour to solve, it deserves sharing”, and that’s always been the story of my blogs over the last decade plus. The biggest struggle is finding the time to sit down, pull all my notes together, and sharing it with the larger IT community. With a holiday weekend and time off, since I’m not WORKING working, I figured why not start a fun series in the Microsoft Modern Workplace space I spend most of my time architecting, deploying & speaking about!

Volume 1 will cover a topic that has been near and dear (and a pain in my rear) to me, and it has to do with the Microsoft Device Management story as it pertains to Hybrid AD devices. Azure AD is the nirvana, mountain top goal that all organizations should be aiming, but as a realist in recognizing that takes time, time, and more time, starting off with Cloud management is a baby step in bringing the rest of an organization.

To meet the prerequisites for the SCCM Co-Management story, Hybrid AD and Intune registered devices for MDM are necessary; see:

In a Hybrid AD scenario this requires line of sight to a domain controller (which also applies to AutoPilot and Hybrid AD, but that’s for another Volume), but what happens with a remote workforce? Let’s dig into the “gotchas” to bring these devices into the fold.

Continue reading “Notes From The Field, Volume 1 – The Hybrid AD Device Management Troubleshooting Guide” »

Quickly Enroll PCs with Intune

There are 2 easy ways to get the Intune client installed on your PCs:

Go to and log in with an account assigned an Intune license.

Click the information bar saying the device isn’t enrolled, and then click Enroll!


Then click Download software and run the Microsoft_Intune_Setup.exe


(Be sure you have local admin rights to perform the install first!)


Otherwise, if you want to provide the install more centrally, you need to log into:

From there under Admin go to Client Software Download


Click the button to download


Keep in mind this is specific to the tenant itself


As it includes the installer EXE and the certificate specific to your tenant


Now you’ll want to extract the EXE and cert to a folder (let’s say C:\temp\InstallIntune) and double-click on the EXE to start the install.

However if you’re looking to deploy Intune with a new PC image (such as part of a Windows 10 rollout) in an Enterprise environment, you’ll want to prepare setup and the enrollment process properly.

You’ll still want to extract the installer to the hard drive, but then create a setup_intune.cmd and place it under %windir%\setup\scripts. This is important because it finalizes portions of the install BEFORE any users sign on for the first time.

Here is the contents of the setup_intune.cmd:

%windir%\system32\reg.exe add HKEY_LOCAL_MACHINE\Software\Microsoft\Onlinemanagement\Deployment /v
WindowsIntuneEnrollPending /t REG_DWORD /d 1
%systemdrive%\temp\InstallIntune\Microsoft_Intune_Setup.exe /PrepareEnroll

Now once your machines start to come online and users login, their machines will enroll with Intune