Your network has an Active Directory domain with 2,000 Windows 10 computers and you implement hybrid Azure AD join and Microsoft Intune. To automatically register all existing computers with Azure AD and enroll them in Intune while minimizing administrative effort, which method should you use?

Deploying a Group Policy Object (GPO) is the most efficient method for automatically registering existing domain-joined Windows 10 computers with Azure AD and enrolling them in Intune. A GPO can be configured to enable automatic MDM enrollment for hybrid Azure AD joined devices, leveraging existing Active Directory infrastructure to push these settings to all 2,000 computers simultaneously with minimal administrative effort. Creating an Autodiscover address record or service connection point (SCP) is primarily for Exchange or other services, not for automatic Intune enrollment of existing devices. Windows Autopilot is for new device provisioning or resetting existing devices, not for bulk enrollment of already deployed, domain-joined machines.