How does a large enterprise confirm/validate that their machines in their fleet have the certs in place and activated?  Specifically, if they are mixed with some SCCM and some Intune?  It is a manufacturing company with the plants still on SCCM/WSUS vs Corporate/Windows Update for Business.