Intune - Devices do not appear

Question

Intune - Devices do not appear

Sokoban 1,061

Hi

I have make a enrollment a PC, its Hybrid Azure AD joined.

The PC appear in Entra but not in Intune. (Intune Admin Center)

Its something I can fix by myself so PC appear in Intune ?

// Sokoban

Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-09-29T08:44:09.3266667+00:00

Have you enabled automatic enrollment of devices in Intune? How are you enrolling devices in Intune?
Sokoban 1,061 Reputation points

2023-09-29T09:10:17.8433333+00:00

@Rahul Jindal [MVP] Yes , Device Enrollment MDM - ALL and MAM - None

Entra show MDM - None , I have Hybrid Azure AD Joined ... Solution..

Maybe I need to change workload ?
Liam Lynch 0 Reputation points

2023-09-29T10:38:52.25+00:00

There are two parts to this, first, you need to ensure you have enabled Automatic Enrolment for Devices in the Intune Admin Centre.

https://learn.microsoft.com/en-us/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal

Secondlyy youu must effectively instruct the Windows Devices to attempt automatic MDM enrolment. To do this you'll have to configure the MDM Group Policy as per the link

https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy

This will create a scheduled task for the MDM enrolment process under Task Scheduler > Microsoft > Windows > EnterpriseMgmt. If the device do not appear as MDM enrolled, you should check the scheduled task exists and if any error codes exist for the last run.
Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-09-29T14:02:18.2966667+00:00

@Sokoban thanks, but how are you enrolling the devices in Intune? The easiest way is to use a GPO.

Accepted answer

1 additional answer

Your answer

Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-09-29T08:44:09.3266667+00:00

Have you enabled automatic enrollment of devices in Intune? How are you enrolling devices in Intune?
Sokoban 1,061 Reputation points

2023-09-29T09:10:17.8433333+00:00

@Rahul Jindal [MVP] Yes , Device Enrollment MDM - ALL and MAM - None

Entra show MDM - None , I have Hybrid Azure AD Joined ... Solution..

Maybe I need to change workload ?
Liam Lynch 0 Reputation points

2023-09-29T10:38:52.25+00:00

There are two parts to this, first, you need to ensure you have enabled Automatic Enrolment for Devices in the Intune Admin Centre.

https://learn.microsoft.com/en-us/windows/client-management/azure-ad-and-microsoft-intune-automatic-mdm-enrollment-in-the-new-portal

Secondlyy youu must effectively instruct the Windows Devices to attempt automatic MDM enrolment. To do this you'll have to configure the MDM Group Policy as per the link

https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy

This will create a scheduled task for the MDM enrolment process under Task Scheduler > Microsoft > Windows > EnterpriseMgmt. If the device do not appear as MDM enrolled, you should check the scheduled task exists and if any error codes exist for the last run.
Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-09-29T14:02:18.2966667+00:00

@Sokoban thanks, but how are you enrolling the devices in Intune? The easiest way is to use a GPO.

Answer 1

Crystal-MSFT 53,991 Microsoft External Staff

@Sokoban, Thanks for posting in Q&A. In fact, to enroll Hybrid Azure AD joined device into Intune, there are Autopilot Hybrid Azure AD join (mainly for new devices), GPO enrollment (mainly for existing domain joined device, Co-management (mainly for the devices managed by Configuration Manager).

To do GPO enrollment, the setting you provided is correct. You can set it via Domain group policy to apply to bulk of devices. But before doing that, please ensure the Hybrid Azure AD joined is successfully by run "dsregcmd /status" on the device and ensure Dmainjoined, AzureADjoined and AzureAdPrt are all yes. Here is a link with more details for your reference.

https://learn.microsoft.com/en-us/windows/client-management/enroll-a-windows-10-device-automatically-using-group-policy

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-10-05T02:20:15.06+00:00

@Sokoban, Hope things are going well. I am writing to see if there's any update on our issue. If yes, feel free to let us know.
Sokoban 1,061 Reputation points

2023-10-05T08:15:33.0533333+00:00

Hi @Crystal-MSFT

Thanks for you following the case and try solve the problem

The MDM GPO do not show up in the client even the clients is member in GPO and AD.

The client have got GPO error in Event --> 7016, Completed MDM Policy Extension Processing in 16 milliseconds.

I don't find any information about that error.

// Sokoban
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-10-05T08:37:46.6066667+00:00

@Sokoban, Thanks for the reply. Based on my researching, I find it can be the client has some communication issue with DC. Could you let us how many devices are affected?

Meanwhile, please change to configure Local group policy on one device to see if it can work.
Sokoban 1,061 Reputation points

2023-10-05T09:10:17.4933333+00:00

Thanks @Crystal-MSFT

I restarted the computer and Its working , thank you :-)
Crystal-MSFT 53,991 Reputation points Microsoft External Staff

2023-10-05T09:40:39.9333333+00:00

@Sokoban, Thanks for your update. I am glad that it is working. Congratulations!

Answer 2

Sokoban 1,061

@Rahul Jindal [MVP]

That GPO Settings you mean ?

MDMPolicy

Share via

Intune - Devices do not appear

1 additional answer

Your answer