Forum Discussion

MattyT's avatar
MattyT
Copper Contributor
Sep 12, 2025
Solved

Intune Confusion

Hey guys,  I'm relatively new to Microsoft Intune and have been playing with the platform with a view of potentially using it as our corporate endpoint management solution.  I've been playing with ...
Intune
  • Bogdan_Guinea's avatar
    Bogdan_Guinea
    Sep 14, 2025

    MattyT​ 

    Hy,

    Intune Management Extension: 

    IME is responsible for running PowerShell scripts and Win32 app deployments, so a device will first become the IME after a proper app or script assignment.

    The IME Service only runs when device configuration policies, Win32 app or Scripts deployments are targeted to the device

    So it could be possible, that the system with IME running has received a policy or app assignment which triggers it, while the others have not yet triggered IME because no applicable policies or apps are assigned (or successfully targeted) to them yet.

    Device Only licensing:

    these are intended for devices that are not user-affiliated, such as shared devices, kiosks, or hotdesks.

    MDMURL blank:

    dsregcmd output can mean the device is only enrolled in device management mode (device-only enrollment) without full MDM configuration profile or user MDM enrollment.

    Questions:

    Can you try to make an app deployment to those devices?

    Check the Events under Event Viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider

    Good luck!

Ankido88's avatar
Ankido88
Copper Contributor
Sep 14, 2025

Hi, 


A) Why does only one device have IntuneManagementExtension and log folder?

Force sync in Intune (Devices > Windows > Sync). Check service via PowerShell (Get-Service IntuneManagementExtension). Re-enroll one device without DEM if needed.

B) Is something wrong with Device Only licenses or enrollment?

Verify license assignment (Devices > Properties > Licenses). Test enrollment without DEM using automatic enrollment. Check enrollment restrictions (Devices > Enroll devices).

C) Why isn’t the app installing?

Ensure app is assigned to device group and marked "Required." Force sync (Devices > Sync). Check logs on device with service (C:\ProgramData\Microsoft\IntuneManagementExtension\Logs). Test with simple app (e.g., 7-Zip).

D) Why is MDMurl blank but devices check in?

Check MDM settings (Devices > Windows enrollment > Automatic Enrollment). Run dsregcmd /debug for details. Re-enroll one device without DEM.

Next steps: Sync devices, check logs, test enrollment without DEM, verify MDM and app settings. Let me know if you need specific steps!

Resources