Intune device enrolment for Hybrid AD joined machine

Question

Intune device enrolment for Hybrid AD joined machine

Gaurav Nigota 0

Facing issues while enrolling a machine(Hybrid join) to Intune via GPO, however the machine shows the MDM URL's correctly checked through dsregcmd /status.
Still the machine is not enrolling over Intune Portal.

Checked the Hybrid join-SCP configuration, works perfectly.
What should I do or check?

Rahul Jindal 11,721 Reputation points

2026-09-07T10:07:38.76+00:00

Are the devices hybrid joined correctly and reporting in Entra ID? Have you enabled automatic enrolment in Intune? Are the users licensed? What value are you using for enrolment in GPO, user or device? Is the user PRT token active on the device? You can also check sign-in logs to see if conditional access policies are interfering with the automatic enrolment or not.
Gaurav Nigota 0 Reputation points

2026-09-07T10:21:37.95+00:00

Yes, the devices are hybrid joined and reporting in Entra ID

Automatic Enrolment enabled in Intune and user's are in scope and the user is licensed.

Value for enrolment in GPO : User credentials.

AzureAdPrt : No, but sometimes the value of it changes to Yes.

Your answer

Rahul Jindal 11,721 Reputation points

2026-09-07T10:07:38.76+00:00

Are the devices hybrid joined correctly and reporting in Entra ID? Have you enabled automatic enrolment in Intune? Are the users licensed? What value are you using for enrolment in GPO, user or device? Is the user PRT token active on the device? You can also check sign-in logs to see if conditional access policies are interfering with the automatic enrolment or not.
Gaurav Nigota 0 Reputation points

2026-09-07T10:21:37.95+00:00

Yes, the devices are hybrid joined and reporting in Entra ID

Automatic Enrolment enabled in Intune and user's are in scope and the user is licensed.

Value for enrolment in GPO : User credentials.

AzureAdPrt : No, but sometimes the value of it changes to Yes.