Hey r/sysadmin,

We're running into a weird issue with Intune enrollment in our remote branch. Here's the situation:

• On-prem AD with non-routable UPNs.
• Azure AD Connect is not an option (no global admin access on HQ side).
• Intune is managed by HQ.
• Manual enrollment via "Connect a work or school account" and Company Portal app.

The Problem: Some devices enroll just fine, others don't. We've granted local admin rights to our domain users, but it hasn't solved the issue. The devices that fail to enroll simply don't show up in Intune at HQ.

What we've tried:

• Verified user licenses.
• Checked for any relevant error messages during enrollment.
• Ensured devices have internet access.

Any ideas what could be causing this inconsistency? Could it be a firewall issue? DNS problems? Some hidden Intune setting we're missing? Any troubleshooting tips would be greatly appreciated!

Thanks in advance for your help!