Registering devices with Intune for management and policy enforcement
The device is still going through the “Set up for work or school” path and being treated as a personal device, so OOBE is trying to enroll it back to an organization. Deleting the device objects from Microsoft Entra ID, Intune, and Windows Autopilot alone does not change that behavior.
Two supported ways to break this loop are:
- Allow this enrollment path (personal device) for the affected users
- In the Microsoft Intune admin center, go to Devices > Enroll devices > Enrollment device platform restrictions.
- Select Windows restrictions > Create restriction (or edit an existing one for the target users).
- On Platform settings, set Personally owned devices to Allow.
- Assign this restriction to the user group that needs to complete OOBE.
- Re-run OOBE and choose Set up for work or school; the device will join Microsoft Entra ID and enroll in Intune.
- Use Windows Autopilot instead of the “Set up for work or school” personal path
If personal enrollment must remain blocked, enroll the device as a corporate Autopilot device and let OOBE run in user‑driven mode:
- Register the hardware in Windows Autopilot and assign a Windows Autopilot deployment profile.
- In the profile, use Deployment mode: User-driven and the desired Join to Microsoft Entra ID as option.
- Distribute the device and let OOBE run; Autopilot will:
- Detect the assigned profile.
- Join the device to Microsoft Entra ID.
- Enroll it into Intune and apply policies.
If the device was previously only “Microsoft Entra registered” (Workplace join) and not properly cleaned up, ensure all old device objects are removed from:
- Microsoft Intune
- Microsoft Entra ID
- Windows Autopilot
Then re-register and re-enroll the device using Autopilot or the allowed personal enrollment path.
References:
- Unblock Windows "Set up for work or school" enrollment
- Automatic Intune enrollment via Microsoft Entra join
- Windows Autopilot troubleshooting FAQ
- Set up devices with Windows Autopilot and Intune for Education
- Deploy Microsoft Entra hybrid joined devices by using Intune and Windows Autopilot
- Windows in education