Windows 10: How can we restrict users from joining devices to Azure AD? Is there an admin consent...

Hi TeamWe manage devices using MS Entra ID and MS Intune and manually connect them to Entra ID. The issue is that users can connect their devices to Entra ID independently without requiring admin consent. Is there a setting to restrict users from doing this? Please let me know.

:)

 

Is there a way to create a sort of dynamic group that removes user's ability to Join devices to Azure AD via Autopilot. The group is going to grant access to users to join devices to Azure AD

Is there a way to create a sort of dynamic group that removes users from a group granted access to add devices to Azure AD. the user's ability to Join devices to Azure AD via Autopilot?

50% of users in our environment are not enrolled in mFA. We do not want to grant access to all users to join devices to Azure AD

 

Is there a way to create a sort of dynamic group that removes user's ability to Join devices to Azure AD via Autopilot. The group is going to grant access to users to join devices to Azure AD

Hello, this is Emily.

Windows Autopilot does require that devices be Azure AD-joined. So I am not sure if that's possible. Your question also exceeds the supporting scope of this community. The community here is for general consumers. I will suggest that you post this question in the Q&A forum, specifically for IT admins/ professional users. Microsoft Q&A

 

How to change User Type while joining system to Azure AD.

Hi Team,

We are trying to join a system to Azure AD and we are facing an issue.

Domain is getting joined and the device is reflecting in AD, there is no issue in the Azure part.
But User Type is set to Administrator. Is there any way to change this to Standard User?
Which will restrict users to install apps, changing the registry, and running commands as an administrator.
Posting an image here, please have a look and suggest.

Regards,

Pramod.