Latest Article on Manual Azure AD Join is https://www.anoopcnair.com/windows-10-azure-ad-join-manual-process-cyod/
Also, we will come to know How to enroll Windows 10 machine to Microsoft Intune. We can still use the old method control panel system properties to join a Windows 10 machine to the domain.
However the wizard is changed a bit if you compare it with Windows 7. Domain join is old classical way of joining your Windows 10 machine into your Work domain. So what is the newest trend of Domain join 🙂 It’s AAD join, Azure Active Directory join (AAD is SaaS solution by Microsoft for identity management). When your organization has an Azure AD subscription and MDM solution like Intune then you can join your modern Windows 10 devices to AAD.
When you start the process of Azure AD join with Windows 10, there are two ways to achieve this. First, you can go to Settings –> Accounts –> Work Access and click on Join or Leave Azure AD link. Another way is to go to Settings –> System –> About and join Windows 10 machine to Azure AD from there.
When you click on the link (Join or Leave Azure AD) as mentioned in the above step, it will take you to Windows 10 Settings–>System–>About page. From about page you can change the Windows 10 machine name before joining Azure AD by clicking on Rename PC (Windows 10 PC). To join your organizations Azure AD, click on Join Azure AD button.
On this page, you need to provide Work or School ID which is used for Office 365 or any other Microsoft cloud or business solutions. I’ve entered my cloud ID (Azure AD user ID) and password and clicked on Sign in button.
When your organization has enabled multi factor authentication (MFA) on Azure AD then you will receive a verification call on your mobile number and you need to answer that call and press # to complete the authentication process. If MFA is not enabled then Azure AD join wizard will ask you to check and confirm your organizations name and details. Once you are sure about the organization Azure AD domain you wanted to join click on JOIN button as you see in the below screen.
All finished now. 🙂 Windows 10 machine has joined to Azure AD. Click on finish to complete the process. You can have auto enrollment enabled for Microsoft Intune when machines join to Azure AD in that way there is no need to search in Windows store for Microsoft Intune company portal and install – enroll it 🙂
To confirm Azure AD join, you can go to Settings –> Accounts –> Work Access and confirm whether your organization name is showing up there or not. You can click on that button and check the Azure AD sync details whether policies are getting synced or not.
How to enroll Windows 10 machine to Microsoft Intune?
When you have set auto enrollment for your organization AAD tenant then all the devices which are joined to AAD will automatically enrolled to Microsoft Intune. You don’t have to separately install Intune company portal from the Windows store and enroll the devices. As you can see in the following screen capture, my surface is enrolled to Intune automatically 🙂 and the device type is detected as Mobile. More details about auto enrollment features are explained in the post here.
How to Perform Windows 10 Domain Join ?
Domain join is old classical way of joining your Windows 10 machine to your Work domain. Go to control panel – system properties and click on change settings.
On system properties window, click on Network ID to join Windows 10 machine to a domain. The Windows 10 domain wizard is changed a bit. On the second windows, Join a Domain or Workplace – select one of the option that describes your network. Either select “This computer is part of a business network I use to connect to other computer” or “This is a home computer; it’s not part of a business network“. Select 1st option if you want Windows 10 machine to a domain. Select 2nd option if you want Windows 10 machine to workplace.
How to Rename Windows 10 machine and How to perform Domain Join for Windows 10 machine