Detect and conservatively repair a stale or inconsistent local Windows Intune MDM enrollment when Hybrid Microsoft Entra identity is healthy and MDM GPO Event 7016 reports 2149056522 or 0x8018000A (already enrolled). Correlate one enrollment ID across Enrollments, OMADM, EnterpriseMgmt tasks, CurrentEnrollmentId, and an expired MDM certificate; back up and remove only that confirmed state; retry enrollment; then route 0x8018002A with 0xCAA2000C or AADSTS50076 to a scoped Conditional Access/MFA remediation cohort. Use for authorized Datto RMM or Local SYSTEM work. Do not use for failed Hybrid identity, healthy Intune enrollment, ExternallyManaged=1, Windows Server, ambiguo…
