'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Intune Device Suddenly Appearing as Unknown in Entra ID
Question details
An Intune-enrolled device (Mac or laptop) is unexpectedly showing up as an unknown device in Microsoft Entra ID, leading to Conditional Access compliance failures.
- Product
- Microsoft Intune and Entra ID
- Device & OS
- Mac or Windows laptop
- Scenario
- Attempting to sign in via a browser or access corporate resources protected by Conditional Access.
- Observed behavior
- The device is flagged as unknown in Entra ID, causing compliance checks to fail and preventing the user from signing in to corporate services.
Ensure you have administrator access to the Microsoft Entra admin center and Microsoft Intune to review device logs and Conditional Access policies, or have your Company Portal credentials ready if you are an end-user.
Re-enroll the Device via Company Portal
Re-enrolling the device is often the quickest way to refresh the device identity in Entra ID and resolve immediate Conditional Access failures.
Sometimes the sync between the local management profile and Entra ID breaks, causing the device to lose its identity mapping. Re-establishing this connection can temporarily or permanently restore access.
Launch the Microsoft Company Portal app on the affected Mac or Windows laptop.
Navigate to the devices section, select your current device, and choose the option to remove it or unenroll from management.
Restart your Mac or laptop to ensure any cached management profiles and residual security tokens are completely cleared from the system.
Reopen the Company Portal app, sign in with your corporate credentials, and follow the on-screen prompts to download and install the management profile again.
Wait approximately 15 to 30 minutes for the device record to sync back to Microsoft Entra ID and for the compliance state to update.
Analyze Device Records and Conditional Access Logs
Investigating the specific failure logs in the Entra ID portal can help administrators identify why the device lost its identity mapping.
Consult the Microsoft Intune Support Channel
For persistent device-identity sync issues that cannot be resolved through re-enrollment, reaching out to the official Intune Enrollment support channel is necessary.
Ensure Seamless Productivity with WPS Office
While your IT team resolves Microsoft Intune and Entra ID device compliance issues, you can maintain local productivity with WPS Office. It is a lightweight, robust, and highly compatible Office suite that allows you to continue working on important files offline without being hindered by cloud conditional access policies.
- 1. Download the installer: Visit the official WPS Office website and download the free installer for your Mac or Windows laptop.
- 2. Install the software: Run the downloaded file and follow the simple on-screen instructions to complete the installation.
- 3. Open and edit files offline: Launch WPS Office and instantly open your existing Microsoft Office files to continue working without needing immediate cloud authentication.
Frequently Asked Questions
Why does my Intune-enrolled device suddenly show as unknown in Entra ID?
This typically happens due to a synchronization failure between Microsoft Intune and Microsoft Entra ID, an expired device certificate, or a corrupted device registration token on the local machine.
Will un-enrolling and re-enrolling delete my personal files?
Un-enrolling through the Company Portal generally only removes corporate data, enterprise applications, and management profiles. Personal files on your Mac or laptop remain untouched, though it is always recommended to verify your organization's specific Mobile Device Management (MDM) data policies.
How long does it take for Entra ID to update device compliance after re-enrollment?
It usually takes anywhere from 15 minutes to an hour for Intune compliance policies to fully evaluate the device and sync that status back to Microsoft Entra ID to satisfy Conditional Access requirements.
