Whats the correct way to enroll a local domain computer into Defender?

Currently I have to log in as admin and have user sign into their email but this seems like a weird way to do it.