Please make sure that you have met the following prerequisites:
- Assigned the Intune license and Azure AD P1/P2 licenses to user account;
- Enable auto-enrollment by adding target users in MDM user scope: Azure AD portal (Portal.azure.com) -> Mobility (MDM and MAM) -> Microsoft Intune -> MDM user scope.
- When setting up new Surface Hub device, join the device to Azure AD.
- Deploy configuration policy and compliance policies, and it may take some time (1-2 days) to apply on new AAD joined Surface Hub devices.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.