Minimum License Required for Microsoft Intune Enrollment
Question details
Determine the required Microsoft license for enrolling and managing shared Windows 10 Pro devices via Intune.
- Product
- Microsoft Intune
- Device & OS
- Windows 10 Pro
- Scenario
- Setting up device management for shared computers and ensuring BitLocker recovery keys are backed up to Microsoft Entra ID.
- Observed behavior
- Seeking clarity on whether standalone Intune licenses are sufficient or if additional Microsoft Entra ID capabilities require a separate premium license.
Verify your organization's specific enrollment method (e.g., Autopilot, bulk enrollment) and check your current Microsoft Entra ID subscription tier, as these directly impact the licensing required.
Evaluate Licensing Requirements and Consult Microsoft Community
Identify your endpoint management needs and verify them against Microsoft's documentation or community forums to ensure compliance.
Microsoft Intune licensing is highly dependent on how devices are enrolled and the specific identity features you wish to utilize. While a base Intune Plan 1 license might cover basic MDM (Mobile Device Management), features like automatic MDM enrollment and storing BitLocker keys seamlessly often require Microsoft Entra ID P1 or P2.
Review your current tenant subscriptions in the Microsoft 365 Admin Center to see if you have Microsoft Intune Plan 1 or an equivalent bundle (like Enterprise Mobility + Security E3/E5).
Determine if you need automatic device enrollment when joining Entra ID. If yes, confirm that your tenant includes a Microsoft Entra ID P1 license, which is required for automatic MDM enrollment.
Navigate to the official Microsoft Intune Enrollment community forums online. Post your exact environment details (Shared Windows 10 Pro, BitLocker backup needs) to get up-to-date guidance from Microsoft MVPs and support staff.
Looking for a Cost-Effective Office Suite for Your Managed Devices?
If you are setting up shared Windows 10 Pro devices via Microsoft Intune, deploying software can become expensive. WPS Office serves as a powerful, free alternative to Microsoft 365 apps, allowing users to create and edit documents seamlessly without requiring per-user Office licenses.
- 1. Download the Installer: Visit the official WPS Office website and download the standalone offline installer for Windows.
- 2. Deploy via Intune: Package the WPS Office installer as a Win32 app or MSI in your Microsoft Intune portal for bulk deployment to your shared devices.
- 3. Start Creating: Once deployed, users can open WPS Writer, Spreadsheet, and Presentation to handle all standard document workflows for free.
Frequently Asked Questions
Can I use Intune without a Microsoft Entra ID Premium license?
Yes, you can use Intune with the free version of Microsoft Entra ID for basic device management. However, advanced features like conditional access and automatic MDM enrollment require a Microsoft Entra ID P1 or P2 license.
Does Microsoft 365 Business Premium include the required licenses for Intune and BitLocker backup?
Yes, Microsoft 365 Business Premium is a comprehensive bundle that includes Microsoft Intune, Microsoft Entra ID P1, and Office apps, making it fully capable of automatic enrollment and backing up BitLocker keys.
How are BitLocker recovery keys stored in Entra ID?
When a Windows 10 Pro or Windows 11 device is joined to Microsoft Entra ID and configured through an Intune Endpoint Protection profile, the BitLocker recovery keys are automatically escrowed and saved to the corresponding device object in the Entra ID portal.
