Exam MS-101 topic 1 question 54 discussion

I think the answer should be YES, NO, NO If Device3 was a corporate device, then the answer would be Y,N,Y as per: As per https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll, [For corporate devices, the MDM user scope takes precedence if both MDM and MAM user scopes are enabled. The device will get automatically enrolled in the configured MDM] But Device3 is in fact a BYOD because it is REGISTERED and not ENROLLED

If User 3 is a member of both Group 1 and Group 2, and Group 1 is configured for "Some - Select the Groups that can automatically enroll their Windows 10 devices" in the MDM User Scope, then Device 1 would, in fact, be automatically enrolled in Intune. So, the answers should be Yes, No, Yes.

On exam july/2023

Yes No, No since the question on device 3 is about registering it.

The answer is Y, N, Y With user3, device1 will enroll in Intune just for MAM, not MDM. Simplify Windows enrollment for you and device users by enabling automatic enrollment in Microsoft Intune. This enrollment method enables devices to enroll automatically when they join or register in your Azure Active Directory. Important: For Windows BYOD devices, the MAM user scope takes precedence if both the MAM user scope and the MDM user scope (automatic MDM enrollment) are enabled for all users (or the same groups of users). The device will not be MDM enrolled, and Windows Information Protection (WIP) Policies will be applied if you have configured them. If your intent is to enable automatic enrollment for Windows BYOD devices to an MDM: configure the MDM user scope to All (or Some, and specify a group) and configure the MAM user scope to None (or Some, and specify a group – ensuring that users are not members of a group targeted by both MDM and MAM user scopes). https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-enroll

corrrect Answer Y, N, N User 3 registers Device1, INCONTOSO.COM , here Device1 is REGISTERED in AAD and not ENROLLED MS sources: Intune marks devices that are Azure AD-registered as personally-owned devices. then we know that the Device1 is marked as Personal Device, this can bring us to the second explanation : MS sources: For Windows BYOD devices, the MAM user scope takes precedence if both the MAM user scope and the MDM user scope (automatic MDM enrollment) are enabled for all users (or the same groups of users). The device will not be MDM enrolled, and Windows Information Protection (WIP) Policies will be applied if you have configured them.

On exam today 10/23/22

The answer is correct as the key is in the details. User 1 is in Group 1 so when they JOIN a device to AzureAD it is enrolled in Intune (MDM) User 2 is not in Group 1 so when the JOIN a device to AzureAD it is not enrolled in Intune (MDM) (They would however be able to enrol the system in MAM if they REGISTERED it) User 3 a member of Group 1 and Group 2 however they are REGISTERING a system meaning it would be enrolled in MAM. If they JOINED the system it would be enrolled in Intune (MDM) The key point for user 3 is they are REGISTERING instead of JOINING AzureAD

Correct. User 1 is in the correct group + joins the device (Y) User 2 is not in the correct group- doesn't matter whether they join the device or not (N) User 3 only registers (BYOD), so there is no auto enrolment (N)

YNN Keyword; user3 REGISTERS (!!!) the device

I don't like the answers you have provided there guys. I am lil saddened by you. Please read link below and you will know the truth

YNN is correct. Device 1 is PURCHASED means not company device, BYOD. When you BYOD, u do not want the device to enrolled automatically. You applied MAM to manage the application within the BYOD only. Therefore user3 is a NO

ok, i found it lol - from a reference link provided: Its all about having both MAM and MDM groups. Please read carefully. :) `Important` For Windows BYOD devices, the MAM user scope takes precedence if both the MAM user scope and the MDM user scope (automatic MDM enrollment) are enabled for all users (or the same groups of users). The device will not be MDM enrolled, and Windows Information Protection (WIP) Policies will be applied if you have configured them. If your intent is to enable automatic enrollment for Windows BYOD devices to an MDM: configure the MDM user scope to All (or Some, and specify a group) and configure the MAM user scope to None (or Some, and specify a group – ensuring that users are not members of a group targeted by both MDM and MAM user scopes). For corporate devices, the MDM user scope takes precedence if both MDM and MAM user scopes are enabled. The device will get automatically enrolled in the configured MDM.

Given answers are correct. PersonT is correct for the reason. If a user is part of both MDM and MAM scope, the MAM scope takes precedence therefore, no auto enrollment.https://docs.microsoft.com/en-us/mem/intune/enrollment/windows-enroll.

Y-N-N or Y-N-Y?

It is indeed as JFRigot mentioned. Also, If your intent is to enable automatic enrollment for Windows BYOD devices to an MDM: configure the MDM user scope to All (or Some, and specify a group) and configure the MAM user scope to None (or Some, and specify a group – ensuring that users are not members of a group targeted by both MDM and MAM user scopes) Yes, No, No

Yes, no, no. Sorry