How to Set Up Entra Joined Azure Network Connection for Windows 365 Cloud PCs?

Want an Effortless Intune Network Setup? Why Entra Join Azure Network Connection for Windows 365 Cloud PCs is a Smart, Secure Move

Creating an Entra Joined Azure Network Connection (ANC) for Windows 365 Cloud PCs in Intune is a positive way to simplify and secure your organization’s virtual desktop environment. With this method, Cloud PCs connect directly to Microsoft Entra ID (formerly Azure AD), allowing a move away from old-style domain controllers. Cloud-first companies and remote-focused teams benefit the most from this setup.

What’s the Entra Joined Azure Network Connection?

• No need for on-premises Active Directory.
• Works well for both remote and hybrid workers.
• Helps groups provision Cloud PCs that join Microsoft Entra ID right away.
• Removes the need for VPNs or domain controller access for users.
• Improves security, making use of features like Conditional Access, passwordless sign-in, and device compliance policies.
• Everything is managed and monitored via Microsoft Intune—one place, easy to check and use.

Key Benefits of Entra Joined ANC

• Cloud-First Identity Integration: Cloud PCs connect right to Entra ID. No physical hardware or servers to worry about.
• Simple Provisioning: Set up is quick; no time spent dealing with network tunnels or access back to the main office.
• Better Security: All Cloud PCs can use your organization’s security rules (such as access policies, compliance standards, or secure sign-in).

Step-By-Step: How to Create an Entra Joined Azure Network Connection in Intune

Step 1: Sign in

Use your admin credentials to log into the Microsoft Intune Admin Center.

Step 2: Navigate

1. Go to Devices
2. Click Device onboarding
3. Choose Windows 365

Step 3: Create Connection

1. Click on Azure network connection
2. Click + Create
3. Pick Microsoft Entra Join

Step 4: Fill Out Network Details

• Name your connection (for example, HTMD-W365-AZ-Network)
• Join type: Microsoft Entra Join
• Subscription: Pick the Azure subscription hosting your resources
• Resource Group: The group where the Cloud PC network interfaces will live
• Virtual Network: Choose the one for Cloud PCs
• Subnet: Choose the network segment for IP addresses (make sure half the addresses are open for reliability)

Step 5: Scope Tags

Leave as default unless your company uses custom tags.

Step 6: Review + Create

Double-check your settings. If all looks correct, select Create.

What Checks Happen During ANC Creation?

• Azure tenant readiness: Validates your subscription and resources.
• Virtual network readiness: Confirms the selected network is ready.
• Intune restrictions: Makes sure settings will allow enrollment.
• Permissions checks: Ensures enough rights for apps at subscription, resource group, and network levels.
• Subnet IP availability: Confirms enough free IPs for new Cloud PCs.
• Endpoint connectivity: Makes sure Windows 365 can talk to essential online services.
• Language package: Checks if needed language downloads are available.
• UDP connection check: Confirms network allows fast, stable Cloud PC connections.

How to Monitor Your New Network

1. Return to the Intune portal.
2. Go to Devices > Device onboarding > Windows 365 > Azure network connection.
3. Search for the new ANC name (for example, HTMD-W365-AZ-Network).
4. The status will move from Running checks to Checks Successful once everything is working.

This process helps teams enjoy a simple and secure way to provide Windows 365 Cloud PCs, ideal for today’s mobile workforce. With Entra Join, businesses cut steps and risk without losing security or control. Everything stays visible and manageable in Intune, supporting a smooth, worry-free experience at each stage of Cloud PC deployment.

R