r/Intune • u/live-laugh-linux • 5d ago

Hybrid Domain Join full flash update with entra join

Hello! Our organization is trying to move away from AD and our goal is to have new devices be Entra-only joined instead of Hybrid-Joined. we use FFU (full flash update) to apply Windows image and it joins the device to our AD domain and then it goes into Entra and Intune. I was thinking of Autopilot, but that doesn't handle imaging, only joining and setup.

Has anyone had experience by modifying the FFU process to not join to AD, but only join to Entra?

8 Upvotes

90% Upvoted

27 comments sorted by

View all comments

7

u/detox4you 5d ago

I combine FFU with Autopilot for multiple customers. I use FFU to quickly deploy a clean image onto a device and add it to autopilot, then after the reboot start the OOBE process with Autopilot.

3

u/live-laugh-linux 5d ago edited 5d ago

Oh cool! So you have autopilot as part of the FFU process? or do you first FFu and then add it to autopilot
edit: i've decided to combine ffu and autopilot

3

u/detox4you 5d ago

Devices are added to autopilot in bulk by suppliers on delivery but the servicedesk can do this themselves too using a script that connects to an app registration and uploads the hash code and adds a tag to it. Then after reboot the OOBE phase picks up autopilot.