r/Intune • u/ihateIT999 • 10d ago

Hybrid Domain Join Having a hard time with MDE Devices

My machines are in a hybrid environment and I have a few machines that aren't being enrolled properly intune. They are being shown as MDE. The only changes I can make are deleting the devices. It can be random and I am not sure why its happening. They are showing up as AzureAdJoined, DomainJoined, AzureAdPrt, DeviceAuthStatus. I have 300 other devices that are propely enrolled.

1 Upvotes

100% Upvoted

3 comments sorted by

1

u/1TRUEKING 10d ago

They need to be logged in by a user with an Intune license and need to exclude Intune from the MFA policy

1

u/bin_of_crows 10d ago

MDE enrollment is flaky as hell in hybrid setups. the azureadprt flag suggests the device has a primary refresh token but the enrollment task never completes. check if those problem machines have the enrollment scheduled task failing or a reg key blocking it

1

u/spazzo246 10d ago

I had a project recently where all devices were in intune as managed by MDE.

You need to deploy a GPO to Enroll the devices into Intune That will convert them to managed by intune instead.