How to Know If a Computer Is Connected to Intune

Microsoft Intune is a cloud-based device management platform used by organizations to manage and secure laptops, desktops, and mobile devices remotely. If you're using a work computer — or even a personal device enrolled through your employer — you may want to know whether Intune is actively managing it. The answer isn't always obvious, but there are several reliable ways to check.

What "Connected to Intune" Actually Means

Being enrolled in Intune means the device has been registered with your organization's Microsoft Endpoint Manager tenant. Once enrolled, Intune can push policies, enforce security settings, deploy apps, and monitor compliance status.

There's an important distinction here:

• Azure AD Joined — The device is registered with Microsoft's cloud identity system. This is a prerequisite for Intune enrollment in most setups, but doesn't automatically mean Intune management is active.
• Intune Enrolled — The device is actively managed by Intune. Policies are being applied, compliance is being checked, and IT administrators have visibility into the device.
• Hybrid Azure AD Joined — The device is joined to both an on-premises Active Directory domain and Azure AD. Intune enrollment may or may not be active depending on how the organization has configured co-management.

Knowing which state your device is in matters, because a device can be Azure AD registered without being fully Intune-managed.

Method 1: Check via Windows Settings

The quickest way to verify Intune enrollment on a Windows 10 or Windows 11 device:

1. Open Settings (Windows key + I)
2. Go to Accounts
3. Select Access work or school
4. Click on your connected work or school account
5. Select Info

Under the Device sync status section, you'll see information about management enrollment. If the device is enrolled in Intune, you'll typically see a Management Server Address listed — this will reference a Microsoft Intune endpoint (often containing manage.microsoft.com or similar).

If you see "Managed by [Your Organization's Name]" or a sync status with a recent timestamp, the device is actively enrolled.

Method 2: Use the dsregcmd Command 🖥️

For a more technical and detailed view, the dsregcmd command is one of the most reliable tools available.

1. Open Command Prompt or PowerShell (no admin rights required)
2. Type: dsregcmd /status
3. Press Enter and review the output

Key fields to look for:

If MDMUrl and MDMEnrollmentUrl are populated with Microsoft Intune addresses, the device is enrolled and being managed.

Method 3: Check the Company Portal App

If your organization uses the Company Portal app (available from the Microsoft Store), it's a strong signal that Intune is involved. Opening the app will show:

• Your enrolled devices
• Compliance status (whether the device meets your organization's security requirements)
• Any required or available apps pushed by IT

A device listed in Company Portal as "Compliant" or "Checking status" confirms active Intune enrollment.

Method 4: Task Manager or Installed Services

Intune-managed devices typically have the Microsoft Intune Management Extension (IME) installed. You can verify this:

1. Open Task Manager → Services tab
2. Look for IntuneManagementExtension
3. Alternatively, open Services (search services.msc) and search for Microsoft Intune Management Extension

If the service exists and is running, Intune is actively managing the device — typically handling PowerShell scripts, Win32 app deployments, and remediation tasks.

Method 5: Check Registry Keys (Advanced)

For IT professionals or technically confident users, the Windows registry holds enrollment data:

Navigate to: HKEY_LOCAL_MACHINESOFTWAREMicrosoftEnrollments

Each subfolder represents an enrollment. Look for entries where the ProviderID value is MS DM Server — this indicates an MDM enrollment via Intune.

This method is best suited for IT admins troubleshooting enrollment issues rather than everyday users checking their own status.

Factors That Affect What You'll Find 🔍

Not every device shows the same signals, and several variables affect the picture:

• Enrollment type — BYOD (Bring Your Own Device) enrollments look different from corporate-owned deployments. Personal devices may show a limited management profile rather than full MDM enrollment.
• Operating system version — Older Windows versions (pre-Windows 10 1607) have limited Intune support. macOS, iOS, and Android enrolled in Intune require checking through the Company Portal or device management profiles rather than dsregcmd.
• Co-management configuration — In hybrid environments, some workloads may be managed by Configuration Manager (SCCM) rather than Intune, even if the device is technically enrolled in both.
• Enrollment method — Autopilot-provisioned devices, bulk-enrolled devices, and manually enrolled devices each leave slightly different fingerprints in the system.
• Compliance vs. enrollment — A device can be enrolled in Intune but marked non-compliant if it doesn't meet policy requirements. Enrolled doesn't automatically mean everything is configured correctly from IT's perspective.

What If You're Checking a Non-Windows Device?

On macOS, go to System Preferences → Profiles (or System Settings → Privacy & Security → Profiles on newer macOS). An Intune management profile will appear as a configuration profile from your organization.

On iOS/iPadOS and Android, enrollment is managed through the Company Portal app or through device management profiles in system settings. Look under Settings → General → VPN & Device Management (iOS) for installed profiles.

The Variable That Changes Everything

The methods above give you the technical signals — but what they actually mean depends heavily on how your organization has configured Intune. A device might show enrollment but have minimal policies applied. Another might be fully locked down with compliance checks running every few hours.

Whether your device is enrolled, what's being managed, and how that affects your day-to-day experience comes down to your organization's specific Intune configuration, your role, and whether your device was enrolled as corporate-owned or personal. The signals are there to find — what they mean in your specific environment is the piece only your setup can answer.