Microsoft Endpoint Administrator — Question 388

Your network contains an Active Directory domain. The domain contains 2,000 computers that run Windows 10.

You implement hybrid Azure AD and Microsoft Intune.

You need to automatically register all the existing computers to Azure AD and enroll the computers in Intune. The solution must minimize administrative effort.

What should you use?

Answer options

• A. an Autodiscover address record
• B. a Group Policy object (GPO)
• C. an Autodiscover service connection point (SCP)
• D. a Windows Autopilot deployment profile

Correct answer: B

Explanation

The correct answer is B, a Group Policy object (GPO), as it allows for the automatic configuration of settings across multiple computers, streamlining the registration and enrollment process. Options A and C are related to email services and service discovery, which do not pertain to Azure AD registration or Intune enrollment. Option D, while useful for provisioning new devices, does not address the need to enroll existing devices in Intune automatically.