question

Madscientist-0949 avatar image
0 Votes"
Madscientist-0949 asked Andrew-7689 answered

Intune devices co-managed with SCCM showing as Azure AD ID instead of device name

Hello, technical folks. What would cause co-managed devices to appear in Endpoint Management with the name of the Azure AD ID of the device and a registration time stamp? Like this

8998h96f-caa4-45Ff-8622f6f14b5887c9_Windows_05/07/2021_01:07 PM

The device name appears as above which is same as management name. I created a PowerShell script to count the devices and our environment has a count of 2,097 devices in this state (from a total of 12,987),

How do we troubleshoot this or make those devices appear with their correct names. We would appreciate any help with this.

mem-intune-enrollment
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered

@Madscientist-0949 Thanks for posting in our Q&A.

To clarify this issue, we appreciate your help to collect some information:
1.What version of ConfigMgr are you running?
2.Please check if the device shows the same device name in Azure AD portal.
3.Please try to click "sync" in Settings > Accounts > Access work or school in the affected device and check if the device name shows correct.

If there is anything update, feel free to let us know.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Madscientist-0949 avatar image
0 Votes"
Madscientist-0949 answered LuDaiMSFT-0289 commented

Thank you for the information. The version of config manager on premise is 2103 and it has been cloud attached.

Yes, in Azure AD, the device name for those devices show the same as Intune, the Azure AD ID, instead of the actual name of the device.

I will drive to the location today where we have some of those devices and run a manual sync like you are suggesting and will report the results. If you think of anything else, please let me know.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Madscientist-0949 Thanks for your update. Hope everything goes well.

If this issue still exists after a manual sync, we may need more background information to find the root cause. With Q&A limitation, it is better to create an online support ticket to handle this issue more effectively. It is free. Here is the online support link and hope it helpful.
https://docs.microsoft.com/en-us/mem/intune/fundamentals/get-support


0 Votes 0 ·
Madscientist-0949 avatar image
0 Votes"
Madscientist-0949 answered LuDaiMSFT-0289 commented

Hello and thank you for the follow up. We have done the manual sync for 300 devices and we have seen duplicate objects. We suspect the manual sync may be creating duplicate objects. We are still investigating and will update as soon as we have more details.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Madscientist-0949 Thanks for your kindness. Any update will be helpful to anyone who may meet the same issue in the future.

0 Votes 0 ·
Madscientist-0949 avatar image
0 Votes"
Madscientist-0949 answered LuDaiMSFT-0289 commented

Hello, yes, I will provide an update as soon as I have one. People working remote makes it difficult to track down clients. It looks like running the sync manually for the workstation creates a duplicate entry. We are still testing and as soon as we have more details I will post back with additional questions or steps to resolution.

I suppose one pending question for now is why would the manual Sync from the device create a duplicate entry, if the device tried to Azure AD hybrid join and it is showing the object ID? The assumption would be the same device will merge with the existing ID, not create a duplicate entry.

Thank you.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Madscientist-0949 Based on my experience, duplicate entries situation usually occurs in Hybrid Azure AD joined devices. It created an Azure AD registered record and an hybrid Azure AD joined record for the same device during enrollment. However, we automatically clean up the Azure AD registered state when the windows 10 verison is upate to 1803 and above.
https://docs.microsoft.com/en-us/azure/active-directory/devices/faq#why-do-i-see-a-duplicate-azure-ad-registered-record-for-my-windows-10-hybrid-azure-ad-joined-device-in-the-azure-ad-devices-list

In fact, I haven't seen that it creates the duplicate entry when sync the device. If possible, please contact the oneline support to find if there is a method to just keep an entry in background.

Based on my understanding, I think we can delete the older record. Just to be on the safe side, it is needed to double confirm.

0 Votes 0 ·
Madscientist-0949 avatar image
0 Votes"
Madscientist-0949 answered

Thank you for the information. We have tracked down 7 devices to test with and will post back the results.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Andrew-7689 avatar image
0 Votes"
Andrew-7689 answered

I have the same problem. Have you solved it?

I have noticed that when I delete such devices from Intune and AAD and run AD Connect synchronization, devices show up in AAD with the correct name. But after device tries to do hybrid join the name is change to id_date format.

Problem isn't the name itself but such client's arent correctly managed by Intune (error 400 when I initiate Intune sync on client manually).

Strange is that dsregcmd says that client is domain and aad joined and user has PRT token too...

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.