diff --git a/frontend/pages/admin/IntegrationsPage/cards/AutomaticEnrollment/WindowsAutomaticEnrollmentPage/WindowsAutomaticEnrollmentPage.tsx b/frontend/pages/admin/IntegrationsPage/cards/AutomaticEnrollment/WindowsAutomaticEnrollmentPage/WindowsAutomaticEnrollmentPage.tsx index 3aaddfaa22..3586ff29c8 100644 --- a/frontend/pages/admin/IntegrationsPage/cards/AutomaticEnrollment/WindowsAutomaticEnrollmentPage/WindowsAutomaticEnrollmentPage.tsx +++ b/frontend/pages/admin/IntegrationsPage/cards/AutomaticEnrollment/WindowsAutomaticEnrollmentPage/WindowsAutomaticEnrollmentPage.tsx @@ -41,8 +41,12 @@ const WindowsAutomaticEnrollmentPage = () => { url="https://fleetdm.com/docs/using-fleet/windows-mdm-setup" />
+ {/* Ideally we'd use the native browser list styles and css to display + the list numbers but this does not allow us to style the list items as we'd + like so we write the numbers in the JSX instead. */}+ Select Azure Active Directory > Custom domain names, + then select + Add custom domain, type your + organization's domain name (e.g. acme.com), and select{" "} + Add domain. +
+ Use the information presented in Azure AD to create a new TXT/MX + record with your domain registrar, then select Verify. +
+ Select Azure Active Directory > Mobility (MDM and MAM){" "} + (or search for “Mobility” at the top of the page). +
+ Select + Add application, then select{" "} + + Create your own application. +
+ Set MDM user scope to All, then copy the URLs below, + paste them in Azure AD, and select Save. +
++ Go back to Mobility (MDM and MAM), refresh the page, then + open newly created app and select{" "} + On-premises MDM application settings. +
+ Select the link under Application ID URI, then select{" "} + Edit button next to the Application ID URI input. +
+ Use your organization's domain you added in the first step, + and select Save. +
+ Select API permissions from the sidebar, then select{" "} + + Add permissions. +
+ Select Microsoft Graph, then select{" "} + Delegated permissions, and select{" "} + Group > Group.Read.All and{" "} + Group > Group.ReadWrite.All. +
+ Select Add permissions. +
+ Select Grant admin consent for <your tenant name>, + and confirm. +
+ You're ready to automatically enroll Windows hosts to Fleet. +