Patriot Growth Insurance Services

Disconnect a Registered Device

Before Azure AD joining a device, begin by checking to see if the device is currently Azure AD registered. If your device is not currently registered, continue to the "Azure AD Join" portion of this article. 

If it is, disconnect it by accessing the “Access work or school” settings in Windows. You can follow the below video and preceding screenshots.

Simply type in "access work or school" in your search bar and select the option in the picture below:

If there is anything listed under “Add a work or school account”, click on the arrow to expand it and then click on Disconnect:

There will be a pop-up asking you to confirm that you’d like to remove this account. Click Yes:

Azure AD Join

To fully join (as opposed to register) a device, start by accessing the “Access work or school” settings in Windows:

At the top, next to “Add a work or school account”, click on “Connect”:

On the “Set up a work or school account” screen, click on “Join this device to Azure Active Directory”:

You will be prompted to sign into Microsoft 365. Do so the primary user’s full work address and password:

Once you have successfully logged in, you will receive the following prompt. Confirm the information is correct and click “Join”:

After a brief wait, you should receive a message stating that you’re all set, and that you’ve been connected to Patriot Growth Insurance Services, LLC:

Ensure the above information is correct, note the instructions for switching accounts, and click on “Done”.

As explained by the above dialog box, the Azure AD join process creates a new account/profile. To access to this profile, click on the Start button, select the current account towards the bottom, and then select “Switch user”:

NOTE: When you click switch user, this will cause your device to go into a reboot and there will be 30 minutes or less of downtime where you cannot access your device as it is reconfiguring. Please be aware of this and plan accordingly to not disrupt workflow.

Once you log in to the newly created profile using your work e-mail address and password, you will be prompted to create a Windows Hello PIN. Click on OK to set your PIN:

After clicking on OK, you may receive another login prompt. If so, login again using the same work e-mail address and password you used to log into the PC.

Once you’ve logged in again, you’ll be able to create and confirm your Windows Hello PIN:

You will receive a message stating that your PIN has been created and that you can now login using that PIN. Click on OK to continue:

You can confirm that this PC has been Azure AD joined by accessing the “Access work or school” settings and verifying that it is now “Connected to Patriot Growth Insurance Services, LLC’s Azure AD”:

Once this process is complete. Please be sure to sign into OneDrive and make sure all your files are available. You can also sign into your preferred internet browser and begin syncing to regain your preferred settings.

Assign Device Category

After successfully joining the PC, you will need to visit the Intune Web Company Portal and set the device category. To do so, open your preferred browser and go to https://portal.manage.microsoft.com, click on the three vertical lines at the top-left, and choose Devices:

If there are multiple devices, you may see them listed here, but select the device that was just joined:

Click the “Category is unknown. Tap to select now” banner/notification:

Please choose the correct agency from the list and then click Select (note: agencies are not listed in alphabetical order, so you may need to scan through the whole list to find the one you’re looking for):

If you do not see the correct agency, please contact the Service Desk so that it can be added. Note: agencies are not necessarily in alphabetical order, so you may need to scan through the whole list to find the whole you’re looking for.

Once you return to the previous screen, you should now see the correct agency listed under Device Category: