Issue Overview
The account designated as the Intune "Device Enrollment Manager" (DEM) allows enrolling up to 1,000 devices into Intune, but technicians often encounter enrollment failures such as DeviceCapReached, after 50 "user-driven" enrollments. This happens because Microsoft Entra ID enforces a default 50-device registration cap per user. Handing a device off to an end user or changing its Primary User in Intune does not transfer its original Entra ID ownership, leaving stale registrations attached to the identity assigned the DEM role.
Identity with DEM Role Reaching Entra ID Registration Cap
When technicians use an account assigned the DEM role for Autopilot User-Driven staging, Entra ID logs each device under that identity. Reaching 50 registered devices blocks subsequent enrollments during the Entra join phase.
Resolution: Reassign Primary User via Intune Properties
Search for the designated account in Entra ID > Users, open its Devices menu, and select the handed-off machine. Click Manage on the top toolbar to jump directly to the device blade in Microsoft Intune. In the left menu, select Properties, click Change primary user, and assign the end user's NetID. Updating the primary user in Intune automatically syncs and updates the Entra ID owner property, freeing registration capacity on the account assigned the DEM role.