Forum Discussion
Unable to change MDM Authority to Intune?!
Alright folks, I've been beating my head against a wall for two weeks and I can't do it any longer. I'll preface this with, "I'm new to this." That said, I'm great at figuring stuff out but the documentation on this process is lacking in so many ways.
I've come on with a company that was, as far as I can tell, not managing their devices (in this case, Windows devices). I set about learning everything I could about Entra/Azure (whatever we're calling it these days) and Intune, registering devices, enrolling devices, etc.
We currently pay for 25 Intune licenses. I have one. My Test User account has one. My DEM user has one (which I've set up as a DEM in Intune). And one of our actual employees has one. I'm trying to enroll two devices as a test. Both were set up as an OOBE (one brand new and one wiped and reset). For one I used 'Work/School' login on startup and signed in with my DEM account. For the other I used 'Work/School' and signed in with my Test User account.
I knew to make sure our MDM Authority was set to Intune prior to starting the process. I checked and it's currently reading as "Microsoft Office 365" (see image) I've read about an 'orange bar.' I don't have an orange bar. I read about, "Depending on whether your tenant was pre or post 1911 Service Release, Intune is automatically set as your MDM." and "If Mobile Device Management Authority was set, you cannot change this."
If I don't have an orange bar and the MDM Authority reads "Microsoft Office 365" does this mean, at some point, our MDM was set to "Microsoft Office 365?" And, if so, according to the "...if [it] was set, you cannot change this" am I forever stuck with that as our MDM Authority?? This would seem silly.
Second. In Entra/Azure the two devices I've been using to try and understand this convoluted process say they are being managed (MDM) by "Office 365 Mobile." What the actual... is Office 365 Mobile really Microsoft Office 365 which is really Intune???? I'm lost. (see image)
To make matters worse/more confusing, in Intune when I look at the devices, it says the devices MDM is INTUNE!?!! (see image) *mind blown
I don't really know what I'm missing. I keep reading something about adding Intune as an MDM Authority and being able to choose which Authority I am using to manage devices but, as with everything Microsoft, who knows what's changed since all of this documentation, blog posts, etc. were written. I can't, for the life of me, find anywhere to 'add' Intune or change the MDM Authority.
Can someone PLEASE help me understand this. I've been at this for weeks, I have a timeline as we're rolling out a bunch of new devices and I don't want to miss this opportunity to do it the right way.
I feel like I'm getting close but, on top of being unsure of whether they are even actually being managed by Intune, none of the basic policies I've created are being pushed to the devices regardless of how many times I've checked to make sure the users are in the right group, etc.
I feel like I've tried everything.
I'm pulling my hair out.
UPDATE: I put in a Support ticket with Microsoft as well and received a very quick response/phone call from Microsoft with some explanation and a solution to the first part of this journey. According to the Microsoft technician, at one point there was a Microsoft 365 E5 license in our tenant which comes with Intune (our current licensing only included Office 365 licenses when I started but I have convinced them to add a few Intune licenses) and the MDM Authority was set at that time. He very quickly provided me a link (by email) to the "Change MDM Authority" blade which I have been trying to find for a week! It, apparently, is hidden/gone once your MDM Authority is set.
I've now, very easily, been able to change the MDM Authority to Intune! Argh. So, now off to unenroll and re-enroll these test devices and see if it solves the follow-up issues.
For anyone having similar issues, here is the link>
https://intune.microsoft.com/#view/Microsoft_Intune_Enrollment/ChooseMDMAuthorityBlade
7 Replies
Whoop! Whoop! This has just saved my sanity. :) Thank you so much for sharing this information and the all important link.
Someone set up our MDM Authority to 'Microsoft Office 365' a few years ago when we had E3 licenses, and I couldn't find a way to edit. The link you gave saved the day.
Many Thanks Again!Good that you got it sorted.
Can i ask what office licences you are using that you also need intune licence for?
MS365 Bus Premium includes intune and is approx the same price as Bus Standard + intune.
The problem with many companies is that they refuse to pay for the most appropriate licences for their business needs and it presents huge headaches for IT staff.
MS also dont help the matter with some of their obscene licences costs, but that'll never change.
Licensing is a whole other thing, for sure. The company I work for was/is using a lot of Business Basic and Business Standard licenses as well as Office E3 licenses for their ‘admin/office’ staff and they weren’t managing any of their Windows devices (iOS is managed in Jamf for now). It’s taken a year but I think the CTO has finally come around to spending the money on moving everyone, with only a few exceptions, to Business Premium.
Convincing companies to spend money on IT infrastructure (whether it’s licenses, third party solutions, etc) will always be a challenge, I think. Even when faced with “This is what a breach could cost you.” For many IT folks, like myself, it’s often a slow push to upgrade licenses because in the eyes of C-level folks, “It’s worked this long..” Getting them to understand the risks is my job.
Oh, man!!! SOOOO glad I came across his post!! I was also seeing my MD Authority set to "Office 365 Mobile" and couldn't find WHERE to change that to Intune. The link you provided fixed everything!!
Cheers, mate!
That’s great news. Glad to see the post helped you solve the issue! Onward!
I have almost the same issue as you have MDM authority setup to Office 365 mine is SCCM and I want to change to intune but unable to do as i tried to change form here but no luck. https://intune.microsoft.com/#view/Microsoft_Intune_Enrollment/ChooseMDMAuthorityBlade
Did you manage to change or it is still same?
I have opened different service requests with MS as well but still waiting for their response.
kakazmi Using the direct link to the 'change MDM authority' blade (which was not visible after it was initially set) I was able to change the MDM authority, yes. I don't have any experience with SCCM and co-management, which is what you might be aiming for (?) but https://www.systemcenterdudes.com/sccm-mdm-authority-intune-standalone/ may be of help.
