You need to implement mobile device management (MDM) for personal devices that run Windows 11. The solution must meet the following requirements: •…

The scenario describes a Bring-Your-Own-Device (BYOD) model. The critical requirement is that users sign in to their personal devices using a personal account, not a corporate one. Azure AD registration is specifically designed for this BYOD use case. It allows a device to be associated with an organization's Azure AD tenant, enabling management via Microsoft Intune and providing access to corporate resources, all while the primary sign-in to the Windows operating system remains the user's personal account (e.g., a local account or a personal Microsoft account). This method fulfills all requirements of the question.

B. hybrid Azure AD join: This is for corporate-owned devices joined to an on-premises Active Directory. It requires users to sign in with corporate domain credentials.

C. Azure AD joined: This is for corporate-owned devices joined directly to Azure AD. It requires users to sign in to the device with their corporate Azure AD account.

1. Microsoft Learn. (2023). What is a device identity?. Azure Active Directory Documentation.

Section: "Azure AD registered devices"

Quote: "The goal of Azure AD registered devices is to provide your users with support for the Bring Your Own Device (BYOD) or mobile device scenarios... Users sign in to their devices with a local account or a personal Microsoft account." This directly supports the choice for a personal device where users sign in with a personal account.

2. Microsoft Learn. (2023). Azure AD joined vs. Azure AD registered. Azure Active Directory Documentation.

Section: "Comparison" table.

Details: The table explicitly states that for "Azure AD registered" devices

the primary audience is "BYOD" and the sign-in method is "End-user local credentials". Conversely

for "Azure AD joined" devices

the audience is "Organization" and sign-in is with an "Organizational account (Azure AD)". This clearly differentiates the options and validates the correct answer.

3. Microsoft Learn. (2023). Windows enrollment guide for Microsoft Intune. Microsoft Intune Documentation.

Section: "User-driven enrollment for BYOD"

Details: This section describes the process where users enroll their personal devices themselves. The typical method for Windows is for the user to go to Settings > Accounts > Access work or school > Connect

which registers the device in Azure AD and enrolls it into Intune without changing the primary sign-in account on the device.