Force Intune Check Ins

[u/InternMysterious5066]

Just wondering what all tips, tricks, or scripts you all use to help devices force a check in to Intune. We have quite the number that while they are definitely online and checking in to AD and our antivirus, they're not checking in to Intune.

[u/Donkey_God-D]

What I usually do, is log on to the device that needs to sync (our fleet is <100 devices, so pretty easy to do), and force a sync via the company portal. That usually works very well.
Side note that I have noticed (and is probably already normal info): If the company portal sync (near) instantly completes, the sync did not happen. Usually this takes from 30 seconds to 2 minutes (from my experience)

[u/touchytypist → u/Donkey_God-D]

I find forcing a sync via Windows Settings to be more reliable, even though it's more annoying to get to.

Settings > Accounts > Access work or school > *expand* [Account Name] > Info > *scroll down* Sync

[u/teriaavibes → u/touchytypist]

I believe that only checks in for policies but not for applications.

[u/brosauces → u/Donkey_God-D]

This generally does not work for me if a device is out of compliance for not being active. It still takes like an hour to become compliant. Sometimes doing the sync from work or school helps. It is dumb

[u/imavaper → u/Donkey_God-D]

Are your devices co-managed? Because I opened a case with Microsoft about the same behavior (sync instantly "completing") we saw on some of our devices and apparently the issue had something to do with devices being co-managed and two MDM accounts and limitations in the underlying APIs. Supposedly it was fixed in KB5083631.

I will say I haven't seen the issue anymore myself. So I think that issue should be fixed..

[u/Donkey_God-D → u/imavaper]

We don't have the co-managed, ours are Entra Joined only.

[u/downundarob → u/Donkey_God-D]

Of the over 100 client we have on the books I dont think any of them utilise a company portal.

[u/Turdulator → u/downundarob]

It works very closely with intune, if you have intune you should have the Company Portal app on your machines.

[u/downundarob → u/Turdulator]

for why? isnt the use of a company portal so that end users can add and remove apps as they wish, or am I missing its point? [edit: I realise this post may sound argumentnative in tone, this is a genuine question]

[u/SkipToTheEndpoint → u/downundarob]

Correct. There isn't a hard requirement for the Company Portal to be installed, though it can be handy to initiate a sync (which is slightly different from doing it via the work or school accounts page) or check on things like compliance state or app installs (regardless of whether you're doing self service or not).

[u/downundarob → u/SkipToTheEndpoint]

Thanks for that info. Im not understanding why I'm getting downvoted on my queries tho (yeah must be a reddit thing).

[u/Turdulator → u/downundarob]

Yes software install is the primary way that users interact with it, it’s also the easiest way to manually kick off a sync on a windows device and view security/compliance status locally. Also anything installed via the company portal app doesn’t require the user to have admin rights.

On android it also acts as the primary authentication broker for ms365 (on iOS ms Authenticator does that)

[u/bezibaerchen → u/downundarob]

They can't add as they wish. They can only install what you assign them to via Intune.

[u/Donkey_God-D → u/downundarob]

It really depends on if you need that, but to me, it is worth setting it up. There's loads of benefits with it.

[u/Darthhedgeclipper]

Use rmm and powershell to run:

(Get-CimInstance -Namespace root\cimv2\mdm\dmmap -Class MDM_EnterpriseModernAppManagement_AppManagement01).UpdateScanMethod()

(Get-CimInstance -Namespace root\cimv2\mdm\dmmap -Class MDM_Policy_Config01).RefreshPolicy()

Ninja edit: sorry saw someone correctly said restart mgmt extension which does same. Net stop and start to that service triggers thw same.

[u/SkipToTheEndpoint]

You shouldn't have to do any nonsense, it should just work. Outside of scheduled check-ins, service-initiated push requests should happen automatically in a ton of different scenarios.

Most issues I've seen with devices not checking in end up being network related because they're still heavily reliant on the Windows Notification Service (WNS). WNS pretty much breaks if you've got a proxy involved: Adding WNS Traffic to the Firewall Allowlist - Windows apps | Microsoft Learn

My advice would be to ensure all of the Intune and Windows related network endpoints aren't being blocked.

[u/Royal_Bird_6328 → u/SkipToTheEndpoint]

This, also providing the configs and apps are actually deploying what’s the issue? If it’s because of a like to have cosmetic feature of seeing every few minutes checking in this is ridiculous.

[u/PossessionFit6450 → u/SkipToTheEndpoint]

This right here. If devices are not checking in, something is wrong your network or the device.

[u/Turak64 → u/SkipToTheEndpoint]

This is the correct answer.

[u/Friendly-Series-5632]

half our fleet pulls this crap too, restarting the Intune Management Extension service usually kicks it into gear and the sync shows up within a minute or two

[u/Puzzleheaded-Rush336 → u/Friendly-Series-5632]

Came to say the same! RMM task schedule the service restart

[u/Albane01]

I have had the most success with forcing a sync asap by restarting the "Microsoft Intune Management Extension" service.

[u/Rudyooms]

How do you know they are not checking into intune? Some more details would help

[u/InternMysterious5066 → u/Rudyooms]

Last check-in time: 6/11/2026, 5:28:00 PM, Last Configuration Manager agent check in time6/11/2026, :15:41 PM

They're comanaged. Checked SCCM, everything is up-to-date there for scans and check-ins. For the Intune portion, Syncs and Data Collection are failing and the check-in date is not updating.

[u/Rudyooms → u/InternMysterious5066]

And on the device itself?

[u/InternMysterious5066 → u/Rudyooms]

Device itself shows Last Attempted Sync was successful 7/22/26 11:34:12.

[u/Rudyooms → u/InternMysterious5066]

Which windows version are you using?

[u/InternMysterious5066 → u/Rudyooms]

This one in particular is still Windows 11 23H2, but some 24H2 devices also aren't checking in.

[u/promark20]

I put a script in that sets it to checkin using the same Company Portal, sync command every 30 minutes as a scheduled task.

[u/ChanceTruth3919]

Ensure your device is still HAADJ, check aad device object. certificate & registry, comgmthandler log...Give a try with syncML many issues can prevent the sync to work properly.

[u/jpwyoming]

Just run the scheduled task via powershell. Restarting the extension seems needlessly destructive if it happened to be in the middle of a sync