Devices Not Enrolling in Intune Despite Correct MDM Configuration

Question

I'm working in a hybrid environment, and all of my devices show up as "Hybrid Azure AD joined" in Azure, which is great. However, the issue is that some devices are successfully enrolling into Intune, while others are not.

I've already verified the following settings but am still unable to get auto-enrollment working:

• MDM authority is set to Intune
• MDM URL is properly configured in Azure AD
• MDM scope is set to "All"
• MAM URL scope is set to "None"
• GPO "Enable Automatic MDM Enrollment using default Azure AD Credentials - Set to User Credentials" is properly applied

Despite these configurations, the Event Viewer shows the following error:

Auto MDM Enroll Get AAD Token: Device Credential (0x0), Resource Url (NULL), Resource Url 2 (NULL), Status (Mobile Device Management (MDM) is not configured.)

Auto MDM Enroll: Device Credential (0x0), Failed (Mobile Device Management (MDM) is not configured.)

Any suggestions on what could be causing this issue or any additional steps I should check?

Answer 1

@TARIQ HANIF Thanks for posting in our Q&A.

For this issue, we appreciate your help to collect some information:

1.Ensure that all users logging into the devices have Microsoft Intune licenses assigned.

2.Make sure the devices are properly Microsoft Entra hybrid joined (previously known as Hybrid Azure AD joined). You can verify this by running the dsregcmd /status command on the devices and checking the AzureADJoined, DomainJoined and AzureAdPrt statuses.

3.Double-check that the Group Policy Object (GPO) for automatic MDM enrollment is correctly configured. The GPO should be set to use user credentials, and it should be applied to the correct Organizational Units (OUs) containing the devices.

4.As Rahul Jindal said, please check if there are any Conditional Access policies that might be enforcing Multi-Factor Authentication (MFA) for the users. MFA can sometimes interfere with the enrollment process.

If there is anything update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.