To prepare a Microsoft 365 tenant for Intune, two fundamental settings are required. First, the Mobile Device Management (MDM) Authority must be set to Microsoft Intune within the Intune service itself. This is a one-time action that enables Intune to perform device management for the organization. Second, in Azure AD, the Mobility (MDM and MAM) settings must be configured. This is where you define the "MDM user scope," which tells Azure AD which users or groups should have their devices automatically enrolled into Intune. Without setting the MDM Authority, Intune is not active, and without configuring the user scope in Mobility, devices will not be directed to Intune for enrollment.

Microsoft. (n.d.). Set the mobile device management authority. Microsoft Learn. Retrieved October 15, 2025. In the article's main body, it states, "The MDM authority setting determines how you manage your devices. As an IT admin, you must set an MDM authority before users can enroll devices for management... For new tenants, the MDM authority is automatically set to Intune."

Microsoft. (n.d.). Quickstart: Set up automatic enrollment for Windows devices. Microsoft Learn. Retrieved October 15, 2025. Step 2, "Configure automatic MDM enrollment in Azure AD," details the process: "In the Azure Active Directory blade, select Mobility (MDM and MAM). In the Mobility (MDM and MAM) blade, select Microsoft Intune... For MDM user scope, select All."