You have a Microsoft 365 subscription. Each user is assigned a Windows 365 Enterprise license. You need to deploy Cloud PCs that will be Microsoft…

To deploy Microsoft Entra hybrid joined Cloud PCs, the devices must have network line-of-sight to an on-premises Active Directory domain controller. In Windows 365 Enterprise, this is accomplished by creating an Azure network connection (ANC). The ANC links a provisioning policy to an Azure virtual network (VNet) that is connected to your on-premises network. This connection is a fundamental prerequisite, as the ANC creation process includes health checks to verify connectivity and permissions needed for the domain join. Only after a successful ANC is established can you create a provisioning policy that uses it to deploy hybrid joined Cloud PCs.

B. Create a provisioning policy.

A provisioning policy for Microsoft Entra hybrid join requires you to select a pre-existing and healthy Azure network connection. Therefore, creating the ANC must happen first.

C. Create a configuration profile in Microsoft Intune.

Configuration profiles are used to apply settings to devices after they are provisioned and enrolled in Intune, not to enable the initial provisioning infrastructure.

D. Upload a custom image.

Using a custom image is optional; you can use a gallery image provided by Microsoft. Even if a custom image is used, the network connectivity via an ANC is the primary prerequisite for the hybrid join itself.

---

1. Microsoft Learn. "Create an Azure network connection." Windows 365 Enterprise Documentation. This document explicitly states

"Before you can provision Cloud PCs for your users

you must create Azure network connections (ANCs)... For Microsoft Entra hybrid join

you must provide Active Directory domain details when you create the ANC." This confirms the ANC is the initial step in the Windows 365 configuration.

Reference: https://learn.microsoft.com/en-us/windows-365/enterprise/create-azure-network-connection

Introduction and "Create an ANC" sections.

2. Microsoft Learn. "Create provisioning policies." Windows 365 Enterprise Documentation. The procedure for creating a provisioning policy shows that if "Microsoft Entra hybrid join" is selected as the join type

the next mandatory step is to select a "Network" from a list of existing ANCs. This demonstrates the dependency of the policy on a pre-existing ANC.

Reference: https://learn.microsoft.com/en-us/windows-365/enterprise/create-provisioning-policies

Step 4 under the "Create a provisioning policy" section.

3. Microsoft Learn. "Deployment process for Microsoft Entra hybrid join." Microsoft Entra Documentation. This document outlines the general requirements for hybrid join

emphasizing the need for "network line of sight to your on-premises domain controllers." For Windows 365

the ANC is the specific feature that fulfills this requirement.

Reference: https://learn.microsoft.com/en-us/entra/identity/devices/hybrid-join-plan

"Prerequisites" section.