Really simple suggestion for documentation and the Device Trust config page. In December 2023, for companies with no local domain but using Azure AD , I needed to fill in the "Tenant ID" into the Device Trust policy domain requirement field in order to successfully connect. I grabbed mine from my Microsoft Entra overview page, but there are other ways to get it like running "dsregcmd /status" on a joined laptop.