EDR Policy Success but Devices Show 'Can Be Onboarded' Status in MDE

Question

In an environment where an EDR Policy is configured to onboard devices, the policy reports success in Intune for all scoped devices. However, some devices have been successfully onboarded to MDE, while others continue to show an onboarding status of 'can be onboarded' in MDE. This status has persisted for an extended period.

Answer 1

@Usman Abdullahi, Thanks for posting in Q&A.

From your description, I know you have configured an EDR policy to onboard devices but some of devices not onboard to MDE and show an onboarding status of 'can be onboarded' in MDE

Here is a link you can refer to troubleshoot onboarding issues.

https://learn.microsoft.com/en-us/defender-endpoint/troubleshoot-onboarding#troubleshoot-onboarding-issues-using-microsoft-intune

Also, there are some pre-requirements you need to check if you meet and this issue can be related to License, please also check if the necessary licenses were assigned to the device.

https://learn.microsoft.com/en-us/mem/intune-service/protect/endpoint-security-edr-policy#prerequisites-for-edr-policies

https://learn.microsoft.com/en-us/defender-endpoint/minimum-requirements#licensing-requirements

If there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.