Intune: CNAME auto-discovery ends for Windows MDM-only enrollment on 2027-01-15

Summary

From January 15, 2027, Microsoft Intune no longer supports auto-discovery of the enrollment service via the EnterpriseEnrollment DNS CNAME record in Windows MDM-only enrollment. Users may then have to enter the enrollment server URL manually. Windows MDM-only enrollment itself remains supported and existing enrolled devices are not affected.

What changes?

Until now, the enrollment service is discovered automatically through the EnterpriseEnrollment CNAME record. After the change, users may be prompted to enter the enrollment server URL if the enrollment experience does not provide it: https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc. Enrollments of users who do not know the URL may stall.

Affected

• Organizations using Windows MDM-only enrollment with an EnterpriseEnrollment DNS CNAME record (e.g. EnterpriseEnrollment.contoso.com) for automatic discovery
• Likely not affected: Microsoft Entra join, Microsoft Entra hybrid join and other methods that do not rely on CNAME discovery
• Existing enrolled devices are not affected

Preparation and temporary exceptions

1. Identify all Windows MDM-only enrollment workflows that rely on EnterpriseEnrollment DNS discovery.
2. Update enrollment guides, help desk procedures, deployment and onboarding documentation.
3. Test the affected enrollment scenarios before 2027-01-15.
4. Give users the URL https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc where they may be prompted for it.

Check and complete

Not a defect: the change is intentional. Verify by testing Windows MDM-only enrollment and checking whether the enrollment server URL is requested.

Recommendation

Check your DNS for an EnterpriseEnrollment record and your enrollment processes now. Prefer Microsoft Entra join where possible, update the instructions for users and support, and test enrollment before January 15, 2027. Do not remove the DNS record without checking other requirements.

Timeline

1. 16 Oct 2026Microsoft announces the end of support for CNAME auto-discovery in Windows MDM-only enrollment.
2. 15 Jan 2027Intune ends support for CNAME-based auto-discovery in Windows MDM-only enrollment.

Sources

• Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment Vendor · techcommunity.microsoft.com

Compiled from the sources listed and translated with AI (Claude); status and dates come from the vendor. The vendor’s statements are authoritative. Updated 1 Nov 2026, 15:46.