Intune ending support for Windows MDM-only enrollment CNAME auto-discovery

Starting January 15, 2027, or soon after, Intune will no longer support domain name server (DNS) CNAME-based auto-discovery for Windows MDM-only enrollment scenarios. Enrollments managed through Microsoft Entra ID or other identity platforms are not affected by this change.

Organizations that currently rely on an EnterpriseEnrollment DNS CNAME record for Windows MDM-only enrollment will need users to provide the Microsoft enrollment server URL when prompted. For more information, review the blog: Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment

How this will affect your organization

This change only affects organizations that use Windows MDM-only enrollment and rely on DNS CNAME auto-discovery to locate the enrollment service.

After this change:

• Automatic discovery through EnterpriseEnrollment CNAME records will no longer be supported for Windows MDM-only enrollment.
• Users will need to enter the Microsoft enrollment server URL during enrollment if it is not already provided by the enrollment experience: https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc
• Existing enrolled devices are not affected.
• Windows MDM-only enrollment remains supported. Only CNAME-based auto-discovery is affected.

What you need to do to prepare

If your organization uses Windows MDM-only enrollment with CNAME auto-discovery, review and update your enrollment guidance, documentation, provisioning instructions, or help desk procedures before this change. For more details, review the blog: Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment