Event banner
Event details
Microsoftstevensgroi Sorry to hear you are having trouble with getting some devices upgraded/activated. I would definitely echo what Dom_Cote has said about assigning your Windows Business licenses to your user account and not devices. You can certainly do it to devices if you wish, and it is supported, but from an Admin perspective, it's easier to keep track of doing it on a user basis.
I would encourage you to go to take a look at our documentation for Network endpoints for Microsoft Intune | Microsoft Learn. Full disclosure, this documentation will make references to features your Business Premium licenses may not have access to. The core idea here is that you want to ensure your devices are able to communicate with Intune as license activation can very much be affected by the device's inability to communicate properly.
As far as your MFA question, that would be a better question to ask our Support team and would encourage you to submit a support request.
You Microsoft Store question we'd need a little more information to better understand the ask. I would encourage you to look at the documentation bout controlling access to the Store if you don't want them to have access to it. Configure access to the Microsoft Store app - Configure Windows | Microsoft Learn
We do assign Windows Business Premium licenses per user. We are not assigning them per device. Also some machines are upgrading to Business, some are not. But each user is assigned a Windows Business Premium license.