@Richard Háger Thanks for posting in our Q&A.
For this issue, could you please show the screen shot of the settings under Devices > Enroll devices > Windows enrollment > automatic enrollment in intune portal?
For device enrollment, we usually set "MDM user scope" to "all" and "MAM user scope" to "none". And the URLs are default.
If there is anything update, feel free to let us know.
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.