Intune Enrollment Via BigFix for Stanford-owned Windows Devices

This enrollment option will only display on Stanford-owned devices that are eligible for this enrollment method.

This guide explains the process of enrolling your Stanford-owned Windows device into Microsoft Intune using the Stanford enrollment app deployed via BigFix.

Prerequisite: Set up Authenticator

You'll need to set up your new Microsoft login using the Authenticator app on your mobile phone. This is a required first step. If you haven't already done so, follow the setup instructions for iOS or Android.

Before you begin

• Backup your data: No issues are expected, but it's always a good idea to back up important data.
• Network connection: A reliable Wi-Fi network or wired connection will help ensure your enrollment goes smoothly.
• Save your work: Please ensure all your work is saved and applications are closed before starting the process.

What to know about profile migration

A Windows profile is where your desktop, documents, downloads, and app settings live. When you enroll, Windows will create a new profile for your Microsoft (Stanford Entra) sign-in. You'll be asked to choose whether or not you want to migrate your profile.

• If you select “Yes – Migrate Profile,” the enrollment app will move everything in your existing profile into your new Stanford profile. After the app closes, migration runs silently in the background and your device will restart when it's done. You must not use your computer until the restart completes.
• If you select “No – Skip Migration,” Windows will keep your old profile and create a new, separate Stanford profile. Your files and settings won't move automatically, so you'll need to move anything you want to keep manually.

Starting Your Intune Enrollment

1. You will receive a prompt from BigFix to begin. When the "BigFix Action Requests" window appears on your screen, click Enroll Device into Microsoft Intune from the dropdown menu. 
   Note: If multiple options are available, be sure to select this exact one.
2. Read the description carefully before proceeding.  Select Take Action to initiate action.
   
    
3. An additional dialog box will appear with more details. Click OK when you are ready to proceed.
   
4. The enrollment application will launch automatically. Please be patient — this process can take up to 15 minutes depending on your network speed.
5. The Welcome page will appear. Before you continue, save your work. Carefully read the information on the Welcome page and select Continue to proceed.
   
6. Indicate your device ownership type by selecting "Yes- Stanford Owned," then click Next to continue.
   
7. You'll see Stanford's Single Sign-On (SSO) login screen.
   1. Complete the SSO process by signing in with your credentials
   2. Complete Duo multifactor authentication
      
       
8. A new window will appear with your SUNet ID pre-filled. Review the next steps listed on the screen. Select Launch Enrollment to continue. 
   
    
9. A new Microsoft window will appear. Select Next to continue.
   
10. Complete Microsoft authentication using one of the following methods:
    1. Username and password
    2. Passwordless authentication using the Microsoft Authenticator app
11. On the "Make sure this is your organization" page, select Join.
    
     
12. The enrollment process will complete automatically. 
    
13. Click Done Return to the enrollment application.
14. Review the important information regarding user account profile migration. Decide if you'd like to proceed with the migration and select the appropriate steps. 
    
    
     

Option A: Migrate profile

1. If you select "Yes - Migrate Profile," the dialog will explain the migration process. The account migration runs silently once the Enrollment Application closes. Do not use your computer during this time. Your computer will restart automatically when migration is complete. 
   
    
2. After your computer restarts, sign in using your SUNet ID and password.
3. If prompted, set up biometric authentication and a PIN during your next login. 

Option B: Skip migration

1. If you select "No- Skip Migration," select either either the Close or Reboot Now.
   
2. After rebooting, select Other User on the login screen and proceed with the following sign in steps:
   1. Enter your full Stanford email address in the user field: sunet@stanford.edu
   2. Enter your SUNet password in the password field
3. If prompted, set up biometric authentication and a PIN during your next login.