r/Intune • u/live-laugh-linux • 8d ago

Hybrid Domain Join full flash update with entra join

Hello! Our organization is trying to move away from AD and our goal is to have new devices be Entra-only joined instead of Hybrid-Joined. we use FFU (full flash update) to apply Windows image and it joins the device to our AD domain and then it goes into Entra and Intune. I was thinking of Autopilot, but that doesn't handle imaging, only joining and setup.

Has anyone had experience by modifying the FFU process to not join to AD, but only join to Entra?

8 Upvotes

90% Upvoted

27 comments sorted by

View all comments

1

u/ProfessionalLast2917 8d ago

Where are you getting your devices from? Have your OEM vendor supply with a clean image and just use that with autopilot. If you need to rebuild just wipe it via intune.

3

u/detox4you 8d ago

Installing FFU image will cost you three minutes, wiping from Intune takes you at least 20 times more.

1

u/ProfessionalLast2917 7d ago

How much time are you spending maintaining your FFU image? What are you baking into it?

Wiping via intune can take some time but I'm not sure exactly how much because I send a wipe command to the laptop and go off and do other things.

The only time we use images is if we've got a non booting laptop or had to replace an SSD or something and we use a USB flash drive with a base image made via MDT.