Automatic Intune Enrollment via MDM User Scope

MD-102 By islever Editorial Last updated

intune-enrollment

Short answer

D Configure the mobile device management (MDM) user scope to enable automatic enrollment for Microsoft Entra users.

Question

You have a Microsoft 365 E5 subscription. You need to ensure that when a Windows device is joined to the Microsoft Entra tenant, the device is enrolled automatically in Microsoft Intune. What should you configure?
  1. the Windows Information Protection (WIP) user scope
  2. the Enterprise State Roaming settings
  3. the Microsoft Entra join and registration settings
  4. the mobile device management (MDM) user scope Correct Answer

Key Takeaways

The core concept tested is the distinction between identity join settings and device management enrollment policies, with the common trap being confusion between Entra ID join options and Intune MDM scopes.

This question addresses the configuration required to automatically enroll Windows devices in Microsoft Intune upon joining a Microsoft Entra tenant. It establishes that configuring the MDM user scope is the correct mechanism for this automation.

Common mistake: Learners often select 'Microsoft Entra join and registration settings' because it handles identity, but it does not trigger the MDM enrollment process itself. They may also choose WIP or Enterprise State Roaming, which are unrelated to device management enrollment.

Expert Analysis

Why the Answer Is Correct

To ensure automatic enrollment of Windows devices in Microsoft Intune, you must configure the Mobile Device Management (MDM) user scope. This setting allows you to specify which users or groups are allowed to be managed by Intune and enables automatic enrollment for those entities when they interact with company resources.

Why the Other Options Are Wrong

Microsoft Entra join and registration settings (Option C) handle the identity relationship between the user/device and the directory but do not initiate the MDM enrollment protocol. Windows Information Protection (Option A) is an app-protection feature, not an enrollment policy. Enterprise State Roaming (Option B) synchronizes settings across devices but does not enroll them into management.

Community Comment Notes

The community consensus strongly supports Option D, with multiple comments confirming that the MDM user scope is the standard method for enabling automatic enrollment. As noted by user JayHall, this scope specifically enables automatic enrollment for Microsoft Intune device management.

Official Reference

https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enroll#mdm-user-scope

This link opens the official vendor documentation in a new tab.

Exam Strategy

When configuring Intune enrollment, always distinguish between Identity (Entra ID Join) and Management (Intune MDM). Remember that 'Automatic Enrollment' is a specific capability found within the MDM User Scope settings, not the general join settings.

Frequently Asked Questions

Why doesn't Entra join automatically enroll devices?

Entra join only manages identity. MDM enrollment requires a separate policy like the MDM user scope to establish the management channel.

Can I use WIP for automatic enrollment?

No, Windows Information Protection is for data protection, not for enrolling devices into Intune management.

More MD-102 FAQ →

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. JayHall 👍 2
    Answer is correct: the mobile device management (MDM) user scope To configure Microsoft Intune mobile device management (MDM) enrollment settings so that corporate-owned and personal devices automatically enroll in Microsoft Intune you would use the MDM User scope. MDM user scope enables automatic enrollment for Microsoft Intune device management. https://learn.microsoft.com/en-us/mem/intune/enrollment/quickstart-setup-auto-enrollment
  2. Moot2 👍 2 Answered D
    D looks correct To ensure that a Windows device is enrolled automatically in Microsoft Intune when joined to the Microsoft Entra tenant, you need to: Enable Windows automatic enrollment in the Microsoft Intune admin center. Configure the MDM user scope to enable automatic MDM enrollment for Microsoft Entra users. Use the default values for the relevant URLs. For WIP user scope, select None. Save the configuration
  3. AleFCI1908 👍 1 Answered D
    correct

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Assigning Intune and Cloud PC Roles with Least Privilege

S-grade

SCEP Root Certificate Location for Intune

S-grade

How Many Intune Profiles Are Needed for Cloud PKI User Certificates?

S-grade

What Must Be Purchased First for Intune Device Query at Minimum Cost?

S-grade

Practice All MD-102 Questions

Access 92 questions with complete answers and detailed explanations.

View Full MD-102 Practice Test →

← Back to MD-102 Study Guide