Intune (Initial Setup)

1. Add Intune

Go to Azure active directory → Mobility (MDM and MAM) → Add Application (both Microsoft Intune and Microsoft Intune Enrollment).
You will have to buy Premium license and Intune licenses.

Once the Applications are added, click on 'Microsoft Intune' → MDM user scope - select All, MAM user scope - select None and click Save.
Now click on 'Microsoft Intune Enrollment' →MDM user scope - select None and click Save.

2. Update DNS

In order for the MDM discovery URL to be automatically detected from the email address of your users, add the following CNAME entries in your company domain's DNS.

• CNAME EnterpriseEnrollment.(your_company_domain).com pointing to EnterpriseEnrollment-s.manage.microsoft.com with a TTL of 1 hour
• CNAME EnterpriseRegistration.(your_company_domain).com pointing to EnterpriseRegistration.windows.net with a TTL of 1 hour

3. Configure Endpoint Manager

Go to Microsoft's endpoint manager admin center.

• Go to User → (Your user) → Groups → Assign user to appropriate groups
• Go to User → (Your user) → Licenses → Assign all relevant licenses