I can’t seem to append the UPN to the CNAME per the instructions attached. Do I have to pay $20 a month for this functionality? Or will support add this for me?
There shouldn’t be anything there that needs more than the free plan, nor is support needed.
What exactly is the problem when you try to create the record?
2 Likes
The Contoso DNS admin should create the following CNAMEs:
CNAME
EnterpriseEnrollment.contoso.com
EnterpriseEnrollment-s.manage.microsoft.com
When I add the .contoso.com, nothing happens - it goes blank and doesn’t display the appendage.
Is your domain contoso.com? If not, you should be creating the record in your own domain instead.
More specifically, you don’t need to specify the entire domain, you should just need to create a record called enterpriseenrollment which points to the correct destination. And the same for EnterpriseRegistration if needed.
1 Like
There is a good chance it is if the OP’s surname is Guthrie 
1 Like
Everything should work on all plans and just to confirm what both @thedaveCA and @sandro asked, Contoso.com is a fictional example like example.com which should be replaced with your real domain name.
Now your CNAME record should be entered like this.
Type
CNAME
Name (not enterpriseenrollment.contoso.com)
enterpriseenrollment
Value (make sure it’s with -s)
enterpriseenrollment-s.manage.microsoft.com
What (if any) enrollment failures are you seeing in the Azure portal, have you tried CNAME verification and have you previously enrolled Android/Apple/Windows devices?
https://portal.azure.com/#blade/Microsoft_Intune_Enrollment/EnrollmentMenu/windowsEnrollment
For the record, I didnt ask 
I remember from Raymond Chen’s explanation that Contoso is Microsoft’s internal dummy company. It is a registered domain though.
1 Like
Lacking all forms of caffeine @ 8am the Scott Guthrie reference completely sailed right past me. I’m now laughing uncontrollably. Thanks.
1 Like
I wondered if that wasn’t true. Thanks.
Contoso.com has been Microsoft’s example domain for about 10 years. I used the example as cited in the referenced article above. I failed to use my actual domain in question to protect the privacy of my client.
1 Like
Microsoft’s example reads enterpriseenrollment.contoso.com but I gather that the UPN is inferred as it’s coming from the account with that domain.
I’m not having any errors except that the record reverts to enterpriseenrollment even if I try to add the UPN.
This topic was automatically closed after 31 days. New replies are no longer allowed.