解决加域的Windows设备AD组策略自动注册2---Intune终结点管理（5）

0

1

2

$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM"

New-Item -Path $registryPath

$DWORD = "AutoEnrollMDM"

$DWORD1 = "UseAADCredentialType"

$value = "1"

new-ItemProperty -Path $registryPath -Name $DWORD -Value $value -PropertyType DWORD -Force | Out-Null

new-ItemProperty -Path $registryPath -Name $DWORD1 -Value $value -PropertyType DWORD -Force | Out-Null

C:\Windows\system32\deviceenroller.exe /c /AutoEnrollMDM

$EnrollmentsPath = "HKLM:\SOFTWARE\Microsoft\Enrollments\"

$Enrollments = Get-ChildItem -Path $EnrollmentsPath $DiscoveryServerFullUrls = @("data-id="pd157317-04ooZM48">Foreach ($Enrollment in $Enrollments) {

$EnrollmentObject = Get-ItemProperty Registry::$Enrollment

if ($EnrollmentObject."DiscoveryServiceFullURL" -in $DiscoveryServerFullUrls ) {

$EnrollmentPath = $EnrollmentsPath + $EnrollmentObject."PSChildName"

Remove-Item -Path $EnrollmentPath -Recurse

& "C:\Windows\System32\deviceenroller.exe /c /AutoEnrollMDM"

}

}