remote skiff
https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll to bulk join devices to Azure AD, you would need to create a Windows Provisioning package using the Windows configuration designer app and deploy it to all those devices. Please refer to the link for more information
remote skiff
Do you have one of the roles assigned to the account you are trying to get the token with Global Administrator Cloud Device Administrator Intune Administrator Password Administrator. And do you get any error?
remote skiff
I would reach out to Microsoft Support to check all the settings.
remote skiff
Yes it looks like using the AADInternals powershell module it looks it's also possible with PowerShell. I wasn't aware of that yet
Have you tried this script: https://oofhours.files.wordpress.com/2023/02/generate-aad-ppkg.zip (You also need the proper windows adk for this script to work properly)
remote skiff
Please run the script and provide me with the output
That's weird I have never heard that resetting a password allows an user to RDP. If the user is added to the local security group of Remote Desktop Users he should be able to RDP to the vm. If you need to reset the password you have other issues which needs to troubleshooted
After enrollment I would reboot a couple of times to make sure all the computer policies are on the VM
remote skiff
That's clear try to enable device registration.
I would like to suggest another approach, because this is not the way
Use Microsoft Endpoint Manager with Windows autopilot during Windows deployment to join devices to Azure ad and let Microsoft endpoint manager deploy and configure the device, including join to azure ad
remote skiff
Damm I get confused, initially i thought you wanted to join users endpoint devices to add and now it's VMs. Autopilot is not possible using an azure vm because you need access to the console to be able to initiate the autopilot process
See here howto join a azure vm to aad
{ "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "1.0.0.0", "resources": [ { "type": "Microsoft.Compute/virtualMachines", "name": "yourVMName", "apiVersion": "2019-07-01", "location": "yourLocation", "properties": { "osProfile": { "computerName": "yourVMName", "adminUsername": "yourAdminUsername", "adminPassword": "yourAdminPassword" }, "hardwareProfile": { "vmSize": "Standard_DS2_v2" }, "storageProfile": { "imageReference": { "publisher": "MicrosoftWindowsServer", "offer": "WindowsServer", "sku": "2016-Datacenter", "version": "latest" } }, "networkProfile": { "networkInterfaces": [ { "id": "[resourceId('Microsoft.Network/networkInterfaces', 'yourNICName')]" } ] } } }, { "type": "Microsoft.Compute/virtualMachines/extensions", "name": "joinAADExtension", "apiVersion": "2019-07-01", "location": "yourLocation", "dependsOn": [ "[resourceId('Microsoft.Compute/virtualMachines', 'yourVMName')]" ], "properties": { "publisher": "Microsoft.Compute", "type": "JsonADDomainExtension", "typeHandlerVersion": "1.3", "autoUpgradeMinorVersion": true, "settings": { "Name": "yourAzureADDomainName", "OUPath": "OU=YourOU,DC=YourDomain,DC=com", "User": "YourAdminUser", "Restart": "true", "Options": "3" }, "protectedSettings": { "Password": "YourAdminPassword" } } } ] }