Set up enrollment for Windows devices by using Microsoft Intune


#1

I can’t seem to append the UPN to the CNAME per the instructions attached. Do I have to pay $20 a month for this functionality? Or will support add this for me?


#2

There shouldn’t be anything there that needs more than the free plan, nor is support needed.

What exactly is the problem when you try to create the record?


#3

The Contoso DNS admin should create the following CNAMEs:

CNAME
EnterpriseEnrollment.contoso.com
EnterpriseEnrollment-s.manage.microsoft.com

When I add the .contoso.com, nothing happens - it goes blank and doesn’t display the appendage.


#4

Is your domain contoso.com? If not, you should be creating the record in your own domain instead.

More specifically, you don’t need to specify the entire domain, you should just need to create a record called enterpriseenrollment which points to the correct destination. And the same for EnterpriseRegistration if needed.


#5

There is a good chance it is if the OP’s surname is Guthrie :wink:


#6

Everything should work on all plans and just to confirm what both @thedaveCA and @sandro asked, Contoso.com is a fictional example like example.com which should be replaced with your real domain name.

Now your CNAME record should be entered like this.

Type
CNAME

Name (not enterpriseenrollment.contoso.com)
enterpriseenrollment

Value (make sure it’s with -s)
enterpriseenrollment-s.manage.microsoft.com

What (if any) enrollment failures are you seeing in the Azure portal, have you tried CNAME verification and have you previously enrolled Android/Apple/Windows devices?

https://portal.azure.com/#blade/Microsoft_Intune_Enrollment/EnrollmentMenu/windowsEnrollment


#7

For the record, I didnt ask :smile: I remember from Raymond Chen’s explanation that Contoso is Microsoft’s internal dummy company. It is a registered domain though.


#8

Lacking all forms of caffeine @ 8am the Scott Guthrie reference completely sailed right past me. I’m now laughing uncontrollably. :smile: Thanks.


#9

I wondered if that wasn’t true. Thanks.


#10

Contoso.com has been Microsoft’s example domain for about 10 years. I used the example as cited in the referenced article above. I failed to use my actual domain in question to protect the privacy of my client.


#11

Microsoft’s example reads enterpriseenrollment.contoso.com but I gather that the UPN is inferred as it’s coming from the account with that domain.

I’m not having any errors except that the record reverts to enterpriseenrollment even if I try to add the UPN.