Enroll Linux Devices in Microsoft Intune A Comprehensive Step-by-Step Guide

Microsoft Intune now supports Linux device management (currently focused on  Ubuntu Desktop LTS and corporate scenarios). This enables organizations to apply  Unified Endpoint Management (UEM) principles to Linux endpoints—including  compliance policies, access control, and reporting—using the same Intune portal as  Windows and macOS. 

This blog walks you through the entire enrollment lifecycle, from prerequisites to  verification, with step-by-step commands and exact locations for screenshots. 

Supported Linux Platforms 

As of today, Intune supports: 

• Ubuntu Desktop 20.04 LTS 

• Ubuntu Desktop 22.04 LTS 

Server editions and non-Ubuntu Linux distros are not supported for Intune enrollment. 

Prerequisites 

Before enrolling a Linux device, ensure the following: 

1. Microsoft Intune Configuration 

• Microsoft Intune license assigned to the user 

• Linux enrollment enabled in Intune 

• Azure AD (Microsoft Entra ID) authentication working 

• Device limit not exceeded 

Location: Intune Admin Center > Devices > Linux > Linux enrollment 

Screenshot Placeholder #1 

Linux enrollment section in Intune admin center

2. Azure AD Requirements 

• User must be allowed to join devices 

• Device-based Conditional Access configured (optional) 

Location: Entra ID > Devices > Device settings 

Screenshot Placeholder #2 

Users may join devices to Azure AD

3. Linux Device Requirements 

• Ubuntu Desktop (20.04 / 22.04) 

• Internet connectivity 

• Sudo access 

• Logged-in user must match Intune-licensed user 

Step 1: Download the Microsoft Intune Linux Agent 

On the Linux device, open Terminal and run: 

wget https://packages.microsoft.com/config/ubuntu/22.04/packages-microsoft prod.deb 

sudo dpkg -i packages-microsoft-prod.deb 

sudo apt update 

sudo apt install intune-portal 

This installs:

• Microsoft Intune Portal 

• Company Portal for Linux 

Screenshot Placeholder #3 

Terminal showing successful installation

Step 2: Launch Microsoft Intune Portal 

Open the app from: Applications > Microsoft Intune Portal 

Or run: intune-portal 

Screenshot Placeholder #4 

Microsoft Intune Portal login screen

Step 3: Sign In with Work Account 

• Sign in using Microsoft Entra ID credentials • Complete MFA, if prompted 

After sign-in, the device identity is created in Entra ID. 

Screenshot Placeholder #5 

Successful sign-in and enrollment prompt

Step 4: Device Enrollment 

Once authenticated: 

1. Click Enroll Device 

2. Grant requested permissions 

3. Device registers with Intune automatically  Enrollment usually completes within 2–5

minutes. 

Screenshot Placeholder #6 

Enrollment in progress screen

Step 5: Verify Enrollment on Linux Device 

Run the following command: 

intune-portal status 

You should see: 

Device State: Enrolled 

Azure AD Joined: Yes 

Screenshot Placeholder #7 

Terminal showing device enrolled successfully 

Step 6: Verify Enrollment in Intune Admin Center 

Navigate to: 

Intune Admin Center > Devices > Linux 

You should see: 

• Device name

• User 

• Compliance state 

• OS version 

• Enrollment date 

Screenshot Placeholder #8 

Linux device visible in Intune portal 

Step 7: Apply Compliance Policies 

You can now configure: 

• OS version compliance 

• Encryption requirements (device-level) 

• Conditional Access (e.g., block non-compliant devices) 

Intune > Devices > Compliance policies > Linux 

Screenshot Placeholder #9 

Linux compliance policy configuration

Common Troubleshooting Tips Issue Resolution

Key Limitations (Important)

• No MDM-style configuration profiles like Windows

• No shell script deployment via Intune

• Focused on Conditional Access & compliance

• Ideal for developer workstations

Conclusion

Linux enrollment in Intune is simple, secure, and production-ready for Ubuntu desktops. While not as feature rich as Windows or macOS, it provides essential identity, compliance, and access controls, making it perfect for developer and engineering fleets.