InTune services

---

Hello fellow IT friends. I need your help with some InTune questions.

I run a hybrid network. A traditional on premise AD network that syncs with the Azure cloud. This is because half of our staff works in our Colorado office and the other half is remote from their homes all over the US. In fact, everyone is now working remote because of Covid. Luckily all of our data resides in the cloud which made it very easy to work in these weird times.

I need InTune to manage Windows Updates for all of our user devices. Just wondering if I can register devices in InTune that reside in our traditional on premise domain domain controller. It's a bit unclear on how to do this, and rolling out a policy for Windows updates is a bit unclear as well. Does anyone in this forum use InTune to update Windows 10 Pro users?

Many thanks!

@Todd-Marino ,

This is a very common scenario, especially today with COVID and many people working from home.

You can manage all of your devices, including domain-joined on-premises devices with Intune. Personal/BYOD devices can be enrolled manually or automatically.

For your on-premises devices, they will become Hybrid Azure AD joined, which will make them available to Intune. There are several ways to register a domain-joined device. From your description of your environment, Group Policy might be the easiest. Here is a link with some guides.

https://docs.microsoft.com/en-us/windows/client-management/mdm/enroll-a-windows-10-device-automatically-using-group-policy

Once your on-premises devices are registered, they will be available in the Azure portal. Then you will create device groups that you can use to manage the updates.

Head over to endpoint.microsoft.com and go to Devices. Select Windows and there you can create your update rings and profiles to manage Windows updates.

Hope this helps, let me know if you have more questions or need help.