When you run the LT tool to interrogate Intune to the number of computers you have, you might see that there are two ways to license:
- Intune Company Name … In this screenshot Fabrikam.com
- UPN Name … In this screenshot fabrikam1000.com
Older PolicyPak CSEs were licensed ONLY via UPN name.
Modern PolicyPak CSEs can be licensed by EITHER UPN or COMPANY name… and we RECOMMEND that you use Azure / Intune Company name.
Company name equates to this value in Azure, which Intune also uses.
When you license the PolicyPak CSE by COMPANY name, it doesn’t matter HOW the Windows 10 device was enrolled.
On the other hand, you could use UPN names (aka Custom domain names) to license PolicyPak with Intune, but this isn’t recommended.
When you use UPN name, then the UPN suffix of the person enrolling the computer must match what we license.
Since someone’s email and UPN can change, but typically the Intune / Azure Company name does NOT change… we recommend:
- Using new LT to count the number of computers in Intune and produce a new License File which shows COMPANY name.
- We issue you new keys based upon COMPANY name.
- You use the latest CSE which understands how to process your license via COMPANY name.
Then use PPUPDATE to verify that your computers are CORRECTLY licensed by company name. This is the preferred state for all PolicyPak customers using Intune.
In this example you can see an attempt to use a license using UPN name, but the name of the person who enrolled the machine mis-matches what is in the license file.
For more details around UPN names in azure, see: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/howto-troubleshoot-upn-changes