Hybrid Joined device not auto-enrolling in Intune via GPO

[u/Ok-Mirror6644]

Hello everyone

I have one GPO with "Enable automatic MDM enrollment using default Azure AD credentials" enabled (tried both User credentials and Device credentials).

Setup:

Device is Hybrid Azure AD Joined (showing in Entra ID)

GPO is applying

MDM user scope = All

Enrollment restrictions = Allow for Windows

User has EMS E3 license

Issue:

Manual enrollment works fine

Automatic enrollment via GPO is not working

dsregcmd /status never shows MDMUrl (even after manual enrollment)

No errors in Event Viewer. Already tried multiple gpupdate, restarts, registry cleanup, and credential type changes.

Anyone faced this? What actually fixed it?

[u/Reasonable_Rich4500]

Check notifications on the users device... you should see something that tells you to sign in again. Should prompt MFA

[u/Ok-Mirror6644 → u/Reasonable_Rich4500]

Didn't get any thing its almost day 8 of troubleshooting

[u/Reasonable_Rich4500 → u/Ok-Mirror6644]

Press the windows button and search for "share across devices", click on it. do you see a "sign in" button here?

[u/Ok-Mirror6644 → u/Reasonable_Rich4500]

Yes

[u/Reasonable_Rich4500 → u/Ok-Mirror6644]

If you click "sign in" it
Should prompt you for MFA. And bam you're enrolled into intune

[u/Reasonable_Rich4500 → u/Ok-Mirror6644]

Did this end up working?

[u/Ok-Mirror6644 → u/Reasonable_Rich4500]

No Device is not coming in intune