Fix Issue with Device No Longer Available in Intune after being Renamed
Question
Hi all,
I have a computer that is a Hybrid joined from on-premises AD. I renamed it last night, and 12+ hours later, the device is no longer in Intune. The registration shows “Pending” in Entra. I have tried running another sync from Entra Connect Sync several times to no avail.
How do I get this PC into Intune? This is holding me up from getting software and other configurations applied again.
Posted by Question by Greg Ernest in the HTMD FB group
Answers ( 6 )
Replied by Jalaluddin Sediq
Greg Ernest MDM profile seems to be missing. Go to devices under Enrollment and search your computer by serial number and check if it has an active profile assigned to it. If not, you can assign it easily from the 365 admin center >devices>autopilot and if you can’t find it, you may want to upload the computer back to Intune.
Replied by Robinson Chan
Jalaluddin Sediq enrolled devices on autopilot. There is no need to do this if the device does not need to be managed under autopilot
Replied by Jalaluddin Sediq
Robinson Chan Agreed!
Replied by Greg Ernest
I am running another Entra sync to see if it ports from AD to Entra again.
Replied by Greg Ernest
That seemed to add it to Entra, but bypassing AD. That might cause the user to lose their profile, correct?
Replied by Greg Ernest
Brett Lock Still “Pending”.
Replied by Brett Lock
I assume it has a line of sight to the domain controller?
Replied by Greg Ernest
Yes. It does show in Entra, but as “Pending”
Replied by Brett Lock
Greg Ernest, Just try a dsregcmd /leave and /or join
Replied by Greg Ernest
Brett Lock Hold one.
Replied by Greg Ernest
That completely dropped the machine from Entra. Should that be expected?
Replied by Greg Ernest
Robinson Chan, I had to give up after consulting with the user and determining how little data he had on the device. As much as I hated to, I backed up what I needed and rebuilt the computer from scratch.
I am going to reference back here when I can to see what I can learn for the future. I truly thank you.
Replied by Robinson Chan
Greg Ernest You are very welcome. Usually, the behavior of renaming a machine doesn’t require a configuration on AD or Entra/Intune. Once the name is updated on AD, and after a Delta Sync on Entra Connect Sync Computer object would be updated. For Intune, end it usually takes a while to be updated. But there is nothing required to be done by Admins.
One thing i have seen is that is the user logs in using Domainusername sometimes the device does not enroll into Intune but by entering the full UPN ([email protected]) during windows logon screen the device subsequently gets enrolled to Intune.
If all things failed, the next step is to unregister on entra ID by running dsregcmd.exe /leave /debug and then verifying that the object no longer exists on Intune and Entra ID. I will restart the machine, get the user to log in with a full email address and let the process complete on its own. The worst case is to run the /leave command and then re-join the domain.
Usually data in the user profile will not be affected, be it leaving the domain or changing the login from SAM Account or Email address because both essentially is the same account just utilizing different methods to login.
Replied by Robinson Chan
Greg Ernest it should be either, and yes, elevated
Replied by Greg Ernest
Robinson Chan, What switches should I try? I did the /join.
Replied by Greg Ernest
I also confirmed that the logged-in user has a 365 license.
Replied by Robinson Chan
Greg Ernest the command would be dsregcmd.exe /leave, verify that the computer objects are removed on intune and Entra ID then restart the machine.
Replied by Robinson Chan
Greg Ernest, for the user account, is it logged in with Domainusername
For more details – Fix Issue with Entra Hybrid Joined Devices Unjoined and Rejoined after Intune Enrollment
https://www.anoopcnair.com/fix-issue-entra-hybrid-joined-devices-unjoined/
Replied by Robinson Chan
What account did you log in to on the machine? Does the account have a valid license assigned?
Replied by Greg Ernest
I used the end user. Yes, he has a valid license.
Should I try a different user, perhaps my own? I really don’t want to drop it out of the AD Domain. That would cause problems with the user profile, would it not?
Replied by Robinson Chan
If you are using the SAM account to log in, maybe try logging in with the email address instead. If not, I’d suggest running dsregcmd.exe to clear the computer object on entra ID and let the device register again.
Replied by Greg Ernest
Robinson Chan, Is this a PS or CMD? Elevated, I assume.