Multiple Tenant device management.

chris 66 Reputation points
2022-11-24T13:58:03.587+00:00

Hi,
While working on device management, I come across a situation where a device is managed by two tenants. In one tenant it was enrolled using autopilot and in another it was enrolled using azure ad join.
I want to know is this bug or we can manage a device from two different tenants.

Windows Autopilot
Windows Autopilot
A collection of Microsoft technologies used to set up and pre-configure new devices and to reset, repurpose, and recover devices.
410 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,729 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,365 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,559 questions
0 comments

3 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Rahul Jindal [MVP] 9,151 Reputation points MVP
    2022-11-24T15:01:49.963+00:00

    Not supported as far as I know. A managed device can only have single organizational identity. Can you provide more data to support your findings? Possibly some screenshots?

  2. Crystal-MSFT 43,221 Reputation points Microsoft Vendor
    2022-11-25T01:08:25.67+00:00

    @chris , Agree with RahulJindal-2267, a device managed by two Intune tenant is not supported. It will cause issue. Please remove the device records in one Tenant from both Azure AD portal and Intune portal to avoid issue.

    Hope it can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments
  3. Akshay-MSFT 16,031 Reputation points Microsoft Employee
    2022-11-29T09:36:10.417+00:00

    Hello @chris ,

    From the 2 screenshots, I could see the check-in time is different. Possibly the device was managed in one tenant and was deleted (via device actions and not "Retire") leaving the stale entry behind.

    To fix the issue kindly check the following on the device:

    Navigate to Settings > Accounts > Access work or School > Look for the tenant the device is connected to:

    265193-image.png

    Kindly delete the device record from the tenant which is not showing up in work or school screen and also delete AAD device record from that tenant.

    Thanks,
    Akshay Kaushik

    Please "Accept the answer", "Upvote" and rate your experience if the suggestion works as per your business need. This will help us and others in the community as well.

    0 comments