@Anonymous ,From your description, it seems some devices are not co-managed. If there's any misunderstanding, feel free to let us know.
To troubleshoot this, firstly, we suggest to go to one affected device, Settings->Accounts->Access work or school, find the account there and see if there's info button under the account.
Meanwhile, open command prompt with run as administrator and run dsregcmd /status to see if both AzureAdJoined and DomainJoined are set to YES. if the SSO State section displays AzureAdPrt as YES.
In addition, please also collect the following information to clarify:
- How did we configure the Automatic enrollment in Intune in Configuration manager? Did we configure Pilot or All? If we configure pilot? was the affected device include in the pilot collection?
- Check the event log under Applications and Services Logs/Microsoft/Windows/DeviceManagement-Enterprise-Diagnostics-Provider/Admin: to see if there's any error related.
https://learn.microsoft.com/en-us/troubleshoot/mem/intune/troubleshoot-windows-enrollment-errors - Were any troubleshooting steps we tried before.
If there's any update, feel free to let us know.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.