I am setting up an Android Tablet with Intune policies and I thought all was good but during testing noticed when I go on the device to Microsoft Authenticator app > Settings > Device Registration it gives me the option to "Unregister device".
I tested to see if it actually does de-register or give a warning message if the user tried, but it does allow them to de-register? If they then go to a Microsoft app they need to sign back in and asks to register the device.
Can someone explain if this functionality is normal? It didn't un enrol the device from Intune/Endpoint (although did only leave it un registered for 5 minutes). Here are some screenshots, one screenshot is of the part it allows a user to unregister, then the other is if they sign into outlook, office etc after doing the unregister it asks to re-register?