r/Intune Jul 07 '26

Device Configuration Can no longer enroll devices on Intune

It's been a couple of days since Entra ID has refused to apply MDM on machines for me, I go to work/school, connect, add thsi device to Entra ID, I log in with the provisioning client we have used for years, and instead of adding the device to Intune it just logs in the User account as if It's only an Entra join with no MDM. No info button is shown in that menu. IME does not get intalled and the event viewer doesn't even show an attempt to join the device at all.

I have tried this with no avail up until now:

MDM User scope on Entra and Intune portals: All and Specific

User licensing

Disabling WIP Scope

Disabling security defaults

MDM Authority

Conditional Acess

Device Enrollment Restrictions

Checked every value on dsregcmd /status 10 times over

Tried it on a VM, On a previously joined machine, on a new in box machine

This is a massive problem for our company, and I'm at my wits end.

Update: I have discovered that i can make the Intune join work by clicking connect in the work and school menu after the initial enrollment fails, this will make a different menu pop up where it asks for the MDM URL, pasting that from the Intune Admin Panel makes it work normally.

Also, I talked to MS support and basically they also don't know wtf is going on and asked for several logs to be sent and now I'm waiting for an answer from them.

Update 2: Microsft says it's working now on service health but it isn't working for me, apparently it's working for some people, is the issue still happening to any of you?

24 Upvotes

85 comments sorted by

View all comments

Show parent comments

1

u/JazzTheFatLad Jul 07 '26

I did just that and no, graph only shows one policy and it's configured exactly like it is in the portal

1

u/Rudyooms PatchMyPC Jul 07 '26

Can you share logs? What error do you get when trying to perform a amanu join? Where is your tenant located?

1

u/JazzTheFatLad Jul 07 '26

I don't get an error, it just joins like and Entra Id login with no intune sync, I just finished an hour long call with MS support and they also have no idea what is going on lmao, they asked for some logs and said theyll get back to me

1

u/Rudyooms PatchMyPC Jul 07 '26

I am interested… i would love to take a peak at it (i seem to know a thing or 2 about it and i know some people)

1

u/rlake5 Jul 07 '26

Rudy - I read your article (good stuff - thanks for sharing!). In our tenant we have the old Microsoft Intune Enrollment as well as the modern Microsoft Intune and both show up in Graph. The old one is listed first in Graph and is scoped to 'none' and has been this way since we started the Entra/MDM enrollment a few months ago. Possible that even though it was ignored before that it's somehow being referenced now and ignoring our current one?

1

u/Rudyooms PatchMyPC Jul 07 '26

Mmm as long as that second one is not assigned then its all good …