I have one of the two devices working now, though it created a duplicate device.
I removed the devices from the targeted SCCM collection, forced a sync on each SCCM client... saw the log go to enroll false etc... put them back in the collection and forced another sync... so one of the two computers seems to have enrolled and the other vanished from the intune portal and has not come back no matter how many times I try
It left the device which was originally added as managed by configmgr and then created a new one with managed by co-manage.