Location/Bots Requirements for TrueDEM

A location/bot-based setup of TrueDEM requires the same specifications as an actual real user device. However since there’s no real user interaction in this scenario, there are additional requirements which need attention when configuring such device.

General Requirements

See Windows Platform Requirements.

Additional Requirements

Ensure the device is enrolled with Entra ID.
Confirm the account in use has a valid M365 license.
The user account should be exempted from MFA (and likely from conditional access policies as well).
Restart the device at least once a week (updates).
Autologon must be enabled so the primary refresh token can be renewed (refer to Sysinternals Autologon below).

Autologon

Autologon depends if you have an hybrid setup or a cloud only one.

Hybrid

Make use of the SysInternals Autologon.

Note: this only works if a local Domain Controller is available

https://learn.microsoft.com/en-us/sysinternals/downloads/autologon

Cloud Only

In theory, it is possible to enable autologon when configuring Kiosk mode with Intune for a device. However, since this setup has not yet been tested, no additional information can be shared at this time.

https://learn.microsoft.com/en-us/intune/intune-service/configuration/kiosk-settings-windows