@domdsouza Yes, I believe we are Hybrid Azure AD and the master image was joined to the domain at one time (not currently).
I'm not an expert on Azure, but I can see the IC in the azure portal and it says Azure AD registered.
I have tried locking and unlocking and that seems to work sometimes, but not consistent. Would you be able to provide the script you are using?
Thank You