Enable automatic MDM enrollment using default Azure AD credentials

This policy setting specifies whether to automatically enroll the device to the Mobile Device Management (MDM) service configured in Azure Active Directory (Azure AD). If the enrollment is successful, the device will remotely managed by the MDM service.

Important: The device must be registered in Azure AD for enrollment to succeed.

If you do not configure this policy setting, automatic MDM enrollment will not be initiated.

If you enable this policy setting, a task is created to initiate enrollment of the device to MDM service specified in the Azure AD.

If you disable this policy setting, MDM will be unenrolled.

Select Credential Type to Use:

0. User Credential
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Microsoft\Windows\CurrentVersion\MDM
   Value Name	UseAADCredentialType
   Value Type	REG_DWORD
   Value	1

1. Device Credential
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Microsoft\Windows\CurrentVersion\MDM
   Value Name	UseAADCredentialType
   Value Type	REG_DWORD
   Value	2

MDM Application ID:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Microsoft\Windows\CurrentVersion\MDM
Value Name	MDMApplicationId
Value Type	REG_SZ
Default Value

MDM Application ID represents the ID of your MDM application that is configured in Azure AD. This is optional and only required for automatic MDM enrollment using device credentials when multiple MDM applications are configured in Azure AD.