Intune Certificate enrollment

Sanjit Kumar 0 Reputation points
2026-08-28T03:12:02.7533333+00:00

Hi, users are able to enrollment intune auto enroll certificate through internet, when they are trying to connect their devices through intranet or corporate network they are not able to enroll certificate and dont have that option not sure whats blocking , could you pls suggest to resolve

Microsoft Security | Intune | Enrollment
0 comments

1 answer

Sort by: Newest
Most helpful Newest Oldest
  1. Zoha Fatima 430 Reputation points
    2026-08-30T19:34:47.5233333+00:00

    Hi Sanjit,

    Since certificate enrollment works over the internet but fails only on the corporate network, I would first check the internal firewall, proxy, or SSL inspection rules rather than the Intune profile itself.

    Microsoft requires managed devices and the Intune Certificate Connector to reach specific Intune endpoints. If you are using SCEP, also confirm that devices can reach the NDES URL over HTTPS from the intranet and that NDES can communicate with the CA, DNS, domain controllers, and Intune.

    Comparing the network traffic from a working internet connection with the corporate network should help identify which endpoint or request is being blocked.

    Thank you, and feel free to respond back for more assistance.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.