MC1509780 - Intune ending support for Windows MDM-only enrollment CNAME auto-discovery
Microsoft 365 Message Center announcement MC1509780.
MS Message Center's Summary
Microsoft Intune will end support for DNS CNAME auto discovery in Windows MDM only enrollment on January 15, 2027. After this date, users relying on this method must manually enter the Microsoft enrollment server URL. Existing devices and other enrollment methods remain fully supported. Administrators should update internal provisioning documentation and help desk procedures well before the retirement date.
- Administrator impact
- Administrators must review current enrollment procedures and update internal documentation to advise users on manual URL entry.
- End user impact
- Users performing new Windows MDM only enrollments will need to manually enter the enrollment server URL.
- Importance
- 4/10: This is a planned service retirement that requires updates to internal documentation and user instructions.
Microsoft Summary
Starting January 15, 2027, Intune will end support for DNS CNAME auto-discovery in Windows MDM-only enrollment. Organizations using this must have users manually enter the Microsoft enrollment server URL. Existing devices and other enrollment methods remain unaffected. Update enrollment procedures accordingly.
- Message Center ID
- MC1509780
- Category
- plan For Change
- Severity
- normal
- Services
- Microsoft Intune
- Tags
- User impact, Admin impact, Retirement
- Published
- 2026-10-15
- Last updated
- 2026-10-15
- Expires
- 2027-03-31
- Action required by
- 2027-01-15
Starting January 15, 2027 , or soon after, Intune will no longer support domain name server (DNS) CNAME-based auto-discovery for Windows MDM-only enrollment scenarios. Enrollments managed through Microsoft Entra ID or other identity platforms are not affected by this change. Organizations that currently rely on an EnterpriseEnrollment DNS CNAME record for Windows MDM-only enrollment will need users to provide the Microsoft enrollment server URL when prompted. For more information, review the blog: Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment [How this will affect your organization:] This change only affects organizations that use Windows MDM-only enrollment and rely on DNS CNAME auto-discovery to locate the enrollment service. After this change: Automatic discovery through EnterpriseEnrollment CNAME records will no longer be supported for Windows MDM-only enrollment. Users will need to enter the Microsoft enrollment server URL during enrollment if it is not already provided by the enrollment experience: https://enrollment.manage.microsoft.com/enrollmentserver/discovery.svc Existing enrolled devices are not affected. Windows MDM-only enrollment remains supported. Only CNAME-based auto-discovery is affected. [What you need to do to prepare:] If your organization uses Windows MDM-only enrollment with CNAME auto-discovery, review and update your enrollment guidance, documentation, provisioning instructions, or help desk procedures before this change. For more details, review the blog: Preparing for end of support for CNAME auto-discovery in Windows MDM-only enrollment