https://www.petervanderwoude.nl/post/auto-enroll-windows-10-devices-using-group-policy/