Weird Intune behaviour with logins and policy application

[CHiLL]

I have been troubleshooting some issues with our Intune policies and app deployment, using one of our admin accounts. Traditionally our Intune devices had their domain set as the default school.onmicrosoft.com, so users had to use their full school email addresses were signing in and I've now changed that to our school domain (school.bham.sh.uk), which works and users can just sign in with username instead of their email address. However, while I was logged in as my admin account, apps being deployed were showing in Company Portal, but not downloading because it said it was waiting for the device to sync. The sync button in CP settings showed sync failed for reasons I couldn't deduce from the logs and the user was showing as "Domain\myadminaccount". I was battling this for days without any issue. Yesterday, I logged on with the full email address if the admin account ([email protected]) and it kicked into life, downloaded the apps and synced. Though the user in the log was still showing as "Domain\myadminaccount".

 

Since the domain under the login box shows school.bham.sch.uk - why am I seeing different behaviours when I log in as myadminaccount and [email protected]?

Edited April 25, 2024 by CHiLL

[CHiLL]

This is definitely an account problem.

 

If I log into the Intune laptop as "myadminaccount", I get sync failures with Company Portal.

If I log into the same laptop as "[email protected]", the sync completes.

 

When checking the Intune logs on the laptop, both are using the same GUID, which corresponds with the GUID in Entra. From my research, it appears to be a TLS authentication issue, which fails when using the first login type but succeeds with the second. I may have to raise this with Microsoft.