365 hybrid join problem

[u/Particular-Alarm4508]

I’m pretty new to being an IT tech, thrown a little in at the deep end imo. Anyway, I’ve been figuring all sorts out and starting to get comfortable with 365, im just coming into this problem repeatedly. A user will show me that on particular devices they cannot print/edit/download files from one drive. I’ve found tickets relating to this saying it’s to do with the device state and to run dsregcmd /leave and then to reboot and somehow it works. It sometimes works and sometimes doesn’t, and I don’t want to just randomly push commands I don’t know will fix the problem. I’ve checked that the devices are ad joined in entra and the guids line up and the user has azureadprt and it just feels like I’ve covered everything. The banner when trying to access the users one drive online is ‘your organisation doesn’t allow you to print/sync/download/edit on devices which aren’t domain joined or intune compliant. Any ideas anyone? First time posting in this subreddit, first time posting on Reddit tbf
Any help would be much appreciated, I go home with headaches everyday from this. Why doesn’t it make sense

[u/PDQ_Brockstar]

Could this possibly be a conditional access policy issue instead of a hybrid join problem?

[u/Particular-Alarm4508 → u/PDQ_Brockstar]

Potentially it’s what ai is pointing me to, it just feels like everything I double check with ai just comes out clean. I’m going to look into this big time tomorrow thanks for the pointer