1.Ensure Stable Network Connection
Make sure the device is connected to a stable and unrestricted network. Avoid guest Wi-Fi or VPNs that may block access to Microsoft’s enrollment or policy servers.
2.Verify User Device Enrollment Limit in Azure AD
Log in to the Azure portal → Azure Active Directory → Devices → Device Settings. Check if the user has reached the maximum number of devices allowed (default is 5). Either raise the limit or remove older devices.
3.Review Intune Enrollment Restrictions
Go to Microsoft Endpoint Manager Admin Center → Devices → Enrollment Restrictions and confirm that the user and device platform are allowed to enroll. Update any conflicting configuration settings.
4.Run dsregcmd to Leave Azure AD (if previously joined)
- Open Command Prompt as Administrator and run:
- dsregcmd /leave
- Then restart the computer to clear any residual Azure AD or MDM binding.
5.Clear MDM Enrollment and Join Registry Entries (Advanced)
- Open Registry Editor, navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments\Status
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\MDM
- Delete any stale enrollment records. Back up the registry before making any changes.
6.Ensure Autopilot Profile Is Correctly Assigned
If you're using Windows Autopilot, verify that the device is listed under Devices → Windows Autopilot Devices and has a Deployment Profile assigned. Reassign or reimport the device hash if needed.
7.Sync Device Manually from Access Work or School Account
Navigate to Settings → Accounts → Access work or school, select the organization account, and click Info → Sync to manually initiate the policy and device sync.
- Update Windows to the Latest Version
Go to Settings → Windows Update, install all pending updates, and ensure the device is running a supported build. Azure AD join and Intune compatibility require modern OS versions.
8.Check Group Policy and MDM Settings
- Open Local Group Policy Editor (gpedit.msc) and ensure MDM enrollment is enabled under:
- Computer Configuration → Administrative Templates → Windows Components → MDM
- Also verify that no conflicting policies are disabling device registration.
9.Contact IT Administrator or Microsoft Support
If the issue persists, especially in managed enterprise environments, escalate the issue to your IT admin or Microsoft support. They can verify backend configurations, user assignments, and licensing issues that might block device registration.