We have been noticing that when joining a Win10 Pro device, to Azure AD and enrolling it within Itune, it creates two entries in AAD. One is the Azure AD join and the second is for the itune part. We are joining the win10 device to AAD by logging in as admin and going to work/school account and using the admin account. Once succesfully joined to AAD, we then enroll this device within intune. Intune is how we are managing these devices that have no line of sight to our on prem DC's. Below is screenshot of what it looks like . Any help with this?
