Enrolling devices using Azure AD

Introduction

You can automatically enroll Windows 10 devices to Miradore when they are joined to Azure AD or Azure AD workplace account is added to the device.

Requirements

You must have Azure AD enrollment configured on your Miradore site.

Users must have an Azure AD Premium license assigned to enable this feature.

Join the computer in Azure AD domain or add a workplace account in Settings - Accounts - Access work or school and click on + button.

If the computer is running Windows 10 version 1709 (Fall creators update), the user must select "Join this device to Azure Active Directory" link. Older versions can just proceed with entering username.

Enter the Azure AD username (email address) in the "Set up a work or school account" screen.

Enter the password on the next screen and click Sign in. If this was a newly created user, a password change is requested in the next step.

The user will be shown on the Terms of use page. If they are joining the device to the domain and the admin has configured MDM enrollment, users can't decline it. If they are adding a work account, this step can be declined, as shown below (Decline button visible).

After the device has been joined to Azure AD (or a work account has been added), information is shown in the main Access work or school window.

Domain joined computer

Work account added

Enrollment status can be tracked on the Enrollment page. The type column (initially hidden) shows Azure AD as the type. The user will be created automatically if it doesn't exist yet in Miradore.

Important information about device unenrollment

If you unenroll a device, which was enrolled in Miradore as described in this article, the device will be removed from the Azure AD domain as part of the unenrollment.