weird AAD/Intune issue

[KK20]

I wanted to know which groups a device was member of in AAD. So I logged onto AAD, went to devices, searched for the PC name - one result returned - clicked on the device and the groups section said "none" (I will refer to this as DEVICE_SCREEN). This was odd as I know for a fact it is in one group (since it has deployed some intune policies that I know are working). So I went the other way, clicked groups, looked at the group I know the device is in, low and behold the device was there, clicked on the device and that group box tells me the groups the device is listed in (referred as GROUPS_SCREEN).

 

So I looked at the objectID and deviceID for the two screens - both different. Opening intune, looking at the "hardware" screen for this device and the azure AD device ID (INTUNE_SCREEN).

 

Now, the INTUNE_SCREEN azure AD device ID is identical to the GROUPS_SCREEN device ID. If I look in AD on prem, the ObjectGUID is the same as INTUNE_SCREEN and GROUPS_SCREEN. get-adobject returns not found for DEVICE_SCREEN but returned the correct object for INTUNE_SCREEN/GROUPS_SCREEN

 

So why do I seemingly have two devices but only one appears if I search by name? If I search by name I get the (unwanted really) DEVICE_SCREEN id returned? There are no duplicate "names" in the devices screen nor intune devices.

 

This isnt an isolated PC incident either, in fact this happened when I searched first half a dozen - all of them the same behaviour.

[KK20]

never mind. Ive sorted my own issue, I will leave this here in case anyone else sees this behaviour and scratches their head. By design:

 

https://learn.microsoft.com/en-us/answers/questions/318388/duplicate-hybrid-azure-ad-devices.html

 

I didnt spot the join type of Azure AD registered on the DEVICE_SCREEN properties. So all is well, its just AAD being AAD. I simply need to remember to add a filter in the future, once filtered to hybrid join the same device name appeared with the correct GROUP/INTUNE_SCREEN ID's