Enrollment - Jannik Reinhard

Reenrol devices without wipe

29. January 202422. June 2026 jannikreinhard3 Comments

Looking to reenrol devices without wipe? Enrolled Intune devices occasionally face trust issues due to MDM or Microsoft Azure certificate problems, among other factors. While wiping and re-enrolling is a standard fix, it’s straightforward for regular devices, with minimal data loss thanks to services like OneDrive. However, this process is more complex for specialized field devices, particularly those with custom configurations and vendor-installed software, especially if the vendor no longer exists. Creative strategies are essential in these cases. This blog post delves into an experimental approach to seamlessly bring such devices back under management.

dsregcmd output showing the Azure AD device certificate status

How to get an report with all new enrolled devices

How to Get a Report of All New Enrolled Devices

19. March 20232. July 2026 jannikreinhard5 Comments

Keeping track of newly enrolled devices in your organization can be a challenging task when relying solely on the Intune console. Wouldn’t it be awesome to receive a complete report with all new enrolled devices automatically via email? As you know, I love automating things. In this blog post, we’ll explore a simple and efficient way to generate a weekly report with all new enrolled devices using PowerShell, Azure Automation Runbooks, and Microsoft Graph API. This automated solution will save you time and effort, allowing you to focus on more important tasks in managing your organization’s devices. So, let’s dive in and learn how to create this valuable report with all new enrolled devices!

Do you already know Intune scope tags?

22. January 202323. June 2026 jannikreinhard1 Comment

Intune scope tags allow you to manage a large organization’s IT infrastructure while giving each department/region/sub company/… the flexibility to configure their own settings. Scope tags in Microsoft Intune allow administrators to divide devices in their organization into logical groups. These groups, also known as tags, can be used to make certain settings, applications, and policies available only to specific users or devices. By using Intune scope tags, you can streamline your IT infrastructure, improve security and make your life easier.

In this practical, step-by-step guide we will look at how Intune scope tags work in the real world and why they are essential for delegated administration. If you run a distributed environment, Intune scope tags give you a clean, secure way to separate responsibilities without spinning up multiple tenants. You can read more background on tenant strategy in my other posts on jannikreinhard.com, and the official documentation is available on Microsoft Learn.

How to Enroll an Ubuntu Device in Intune

6. November 202223. June 2026 jannikreinhard4 Comments

Since a few weeks there is a new icon in the Intune console and this is linux. The linux support is a very long awaited feature and there was good feedback from the community. Currently the feature set is still a bit limited, there is currently only the possibility to determine the compliance of the devices and apply conditional access policies.

But this is just the beginning I am sure that in the next months we will see more and more features and also config profiles, updates,… for Linux. But let’s take a look at how to enroll a Ubuntu device in Intune step by step. In this guide you will learn exactly how to enroll a Ubuntu device in Intune, from installing the OS to creating a compliance policy.

Why does this matter in practice? Even though Linux config profiles are not available yet, the compliance and Conditional Access support already lets you treat Ubuntu workstations like any other managed endpoint. That means a developer laptop running Ubuntu can be required to have disk encryption and a minimum OS version before it is allowed to reach Microsoft 365, Azure, or your internal apps. For mixed fleets this closes a real gap, because Linux machines used to sit completely outside your conditional access perimeter.

How to enroll a Ubuntu device in Intune - Intune Linux device overview

Check Autopilot enrollment prerequisite

24. August 202223. June 2026 jannikreinhard6 Comments

Everyone who has enrolled a few devices with Autopilot and has encountered errors knows the problem: it can quickly become very cumbersome to find out why an enrollment fails. Checking the Autopilot enrollment prerequisite for each device up front saves hours of troubleshooting, especially when network endpoints that are not reachable are the cause. To enroll a device with Autopilot there are also some requirements that have to be fulfilled. To check this before the enrollment I have created a script that helps you validate every Autopilot enrollment prerequisite in one run.

Check Autopilot enrollment prerequisite script overview

Manage and Enroll macOS Devices with Microsoft Intune

18. June 20222. July 2026 jannikreinhard2 Comments

Mac management in Microsoft Intune has become a key topic for many IT teams, and in this guide I will walk you through it step by step. I have already described in one of my first blogs how you can set up an Intune development environment and enroll Windows devices via Autopilot and manage them. Apart from Windows, you can also manage iOS, Android and MacOS very well with Intune. Apple offers a good interface (MDM Protocol) to manage MacOS devices, unfortunately not all options are supported with Intune. Also in the WWDC22 there was some great new features introduced.

MacOS support was added to Intune back in 2015. At that time, Mac management in Microsoft Intune was still very limited – something that has changed a lot in the meantime. The number of companies using Mac devices is growing more and more, as is the general market share of macOS compared to Windows. This was around 3% in 2009 and has risen to 15% today (2022). Of course, Windows is still in front, but a clear trend can be seen, and that is exactly why Mac management in Microsoft Intune matters more every year.

There are a lot of worthy blogs that deal with the topic of Mac management in Microsoft Intune:

Just to name a few. Of course there are some great other blogs.

In this blog I want to give you a step by step guide on how to enroll a macOS device in Intune. This is the foundation of Mac management in Microsoft Intune, and there will be more blogs in the future on the topic of managing macOS with Intune.

Microsoft Intune macOS device management setup screen

How to encode an Autopilot hash

3. June 20222. July 2026 jannikreinhard

You may have noticed that an Autopilot hash looks a little different every time you create it. In this blog post, I want to show you how to encode an Autopilot hash and display its content.

Microsoft Endpoint Manager Devices: Complete MEM Tour

Ultimate MEM Tour Part 1: Microsoft Intune Devices

12. September 20212. July 2026 jannikreinhard4 Comments

According to the Gartner quadrant published on August 16, Microsoft is by far the leader in the area of unified endpoint management tools, and managing Microsoft Intune Devices sits at the heart of that success. Microsoft Intune has played a major role in achieving this clear ranking. Intune has grown more and more in recent years and has received more and more new functions. According to rumors, we can soon expect support for Chrome OS (source: twitter).

This blog is the first blog of a whole blog series. In this blog series, I want to give you a tour of all the features that Microsoft Intune has to offer, starting with everything around Microsoft Intune Devices.

Set Up a Modern Windows Kiosk PC with Intune

22. July 20212. July 2026 jannikreinhard2 Comments

In this blog post I want to explain how to set up a modern Kiosk PC. There are many use cases in companies where you don’t want to give the user complete access to Windows. Only one or selected applications should be allowed. Typical use cases would be:

a device that plays a video in a sales room
a device that is used for training of an application
a terminal where someone can give feedback

and many more…

Configure device categories

18. July 202123. June 2026 jannikreinhard2 Comments

To group devices of certain departments or areas, Intune provides a function called Intune device categories. These device categories have been available in Intune for a long time but are not really known by many. In this blog post we will take a closer look at what is behind this function and what possibilities device categories offer.

Where to find device categories in Intune

The device categories function can be found in Microsoft Intune in the Devices menu. In the screenshot you can see 3 sample entries that I created for our tests. For the creation of a category only a name and optionally a description is needed. You can read more about the official behaviour on Microsoft Learn.

Microsoft Intune & AI Insights

Enrollment — Articles by Jannik Reinhard