Can no longer find device serial number in Azure AD for inclusion into group for Windows Autopilot

Aaron Seet 726 Reputation points
2019-12-05T09:54:41.703+00:00

We have previously been repeatedly deploying test computers with Windows Autopilot according to tutorial

https://learn.microsoft.com/en-us/windows/deployment/windows-autopilot/demonstrate-deployment-on-vm

We have a group assigned to the deployment profile, and that group includes device objects with the serial numbers of HWIDs extracted and imported into Intune. Each test computer went through the procedure just fine.

Today, I imported another .csv with a new HWID. It gets shown in the [Microsoft Intune > Device enrollment - Windows enrollment > Windows Autopilot devices] blade. However, when I go back to Azure AD portal and try to add that device object to the assigned deployment group, I cannot find its serial number (since it doesn't have a name yet) listed in the [Add members] blade. Filtering by serial number doesn't work.

This wasn't a problem before. I think the only significant difference for this particular computer is that it was previously AAD-registered and joined and later enrolled in Intune as separate activities as a test computer for pre-existing states. But it was retired off Intune, and unjoined and deleted off AAD. So that shouldn't cause any remnant artefact problems, would it?

How can I narrow down and locate that specific device object? Or was there something else Intune needed to send to AAD for that entry to exist, but didn't send for some reason?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,563 questions
0 comments
Accepted answer
  1. Aaron Seet 726 Reputation points
    2019-12-16T09:06:34.177+00:00

    Looks like if the new device (serial number) record does not ultimately flow to AAD, it might be necessary to delete all the records and try re-importing the HWID again. My second test of retiring and deleting (after a manual join/enrol) and then re-importing worked.

    https://social.technet.microsoft.com/Forums/en-US/681005b9-ce84-41c9-9228-905817a8de18/cannot-find-device-serial-number-in-azure-ad-after-hwid-import?forum=microsoftintuneprod

    0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 34,046 Reputation points Microsoft Employee
    2019-12-10T21:37:17.48+00:00

    How long ago was it added? Hardware and Software Inventory (including serial number) is refreshed every 7 days in Intune, so it's possible that it's just not visible yet. https://learn.microsoft.com/en-us/intune/remote-actions/device-inventory

    0 comments
  2. Aaron Seet 726 Reputation points
    2019-12-12T09:24:36.63+00:00

    What? 7 days? Is that the lead time one must perform Intune side, just so that it can be included in the Azure AD group marked for deployment profile?

    In all our tests, the new device records (serial numbers) end up very quickly in AAD when we imported the HWIDs, and we could perform the Autopilot procedure practically immediately.

    This problem only happens for computers that previously existed in AAD and had their records retired and deleted off Intune and AAD (fully, at least from the Azure portal UIs perspective). They will never appear as serial-numbered devices; only a manual register/join + enroll procedure client-OS-side will let AAD surface out that device record, with its serial number as a secondary property instead of being the primary identifier (which is computer name by that point).

    0 comments