I'm working on a project where we need to apply a specific set of configurations and compliance policies to devices associated with the Intune MDM (Mobile Device Management) platform that are connected to an Azure AD. Effectively, we need to be able to authenticate the device to the domain by logging in using domain credentials, but we also want to be able to manage the device using the full suite of Intune options.
We've tried attaching the device to our domain and then enrolling it, and the result is that a number of Intune options (such as "Restart Device", "Run a Malware Scan" etc.) are all greyed out and cannot be used.
If we try to manually install the Intune client on the device after having attached to the domain, we get an error message saying :
Device is registered to be managed by MDM service.
We've also tried the reverse, by first installing the Intune client manually on the device and thereupon attaching it to a domain. However, having installed the Intune software manually, we now get an error when trying to attach it to the domain, saying the device is already managed by an organisation.
My question is :
Is it possible to attach a Windows 10 device to a domain and subsequently log in using domain credentials, and also install the full Intune client with all available management functions such as remote restarts and Intune policies? Or can you only have one or the other?