Hey,
if you go to your Settings-Tab --> Self Service Portal --> Groupsettings you might can define there your "auto enrollment"
I did in in my company like this. You need to define a device group, policy, taskbundle. As well you need a AD-Group where…