Azure AD License Requirements for Intune Selective Wipe and Enrollment
Question details
The user needs to determine the correct Azure AD Premium license required to perform Intune selective wipe and automatic device enrollment when using Microsoft 365 F3.
- Product
- Microsoft Intune / Azure Active Directory
- Device & OS
- not provided
- Scenario
- Setting up device management, security policies, and automatic enrollment in a Microsoft 365 F3 environment.
- Observed behavior
- Seeking clarification on whether Azure AD Premium P1 or P2 is specifically necessary for selective wipe capabilities alongside existing subscriptions.
Ensure you have global administrator or billing administrator access to the Microsoft 365 admin center to view and assign organizational licenses.
Verify and Assign Azure AD Premium Capabilities
Both Azure AD Premium P1 and P2 (now Microsoft Entra ID P1 and P2) support Intune selective wipe and automatic enrollment, allowing you to choose either based on broader security needs.
While Microsoft 365 F3 includes Microsoft Intune for mobile device management (MDM) and mobile application management (MAM), certain advanced deployment flows like automatic enrollment rely on Azure AD Premium features.
Because both P1 and P2 tiers include the core capabilities required for selective wipe and automatic device enrollment, organizations can safely purchase P1 if they do not require the advanced Identity Protection and Privileged Identity Management features exclusive to P2.
Log in to the Microsoft 365 admin center using your administrator credentials.
In the left-hand navigation menu, click on 'Billing' and then select 'Licenses' to view your current subscriptions.
Check your license details to confirm the presence of Azure Active Directory Premium P1 or P2 (Microsoft Entra ID P1/P2).
Select the users who require automatic enrollment and selective wipe capabilities, and assign the appropriate Premium license to their accounts.
Manage Your IT Documentation with WPS Office
While Microsoft Intune handles your enterprise device management, WPS Office provides a free, lightweight, and highly compatible productivity suite for drafting IT policies, licensing documentation, and user guides without extra subscription costs.
- 1. Download the Installer: Visit the official WPS Office website and click the 'Free Download' button for your operating system.
- 2. Install WPS Office: Run the downloaded installer file and follow the simple on-screen instructions to complete the setup.
- 3. Open Your IT Documents: Launch WPS Office and immediately open your existing Microsoft Office files without losing any formatting.
Frequently Asked Questions
Does Microsoft 365 F3 include Microsoft Intune?
Yes, the Microsoft 365 F3 license includes Microsoft Intune for managing devices and applications. However, certain advanced identity and access features might still require an Azure AD Premium (Entra ID P1/P2) add-on depending on your deployment scenario.
What is the difference between Azure AD P1 and P2 for Intune?
For basic Intune automatic enrollment and selective wipe, both P1 and P2 provide the necessary capabilities. Azure AD Premium P2 primarily adds advanced identity protection, risk-based conditional access, and Privileged Identity Management (PIM).
How do I perform a selective wipe in Intune?
In the Microsoft Endpoint Manager admin center, navigate to 'Apps' > 'App selective wipe', select 'Create wipe request', choose the specific user and their device, and confirm. This removes only company data while leaving personal data intact.
What exactly happens during an Intune selective wipe?
An Intune selective wipe securely removes managed corporate data, organizational apps, and company settings from a user's device. It does not affect the user's personal photos, private applications, or require a full device factory reset.
