Devices enrolled in the NHSmail central tenant via Intune must be enrolled on a per-organisation basis (using ODS codes). This ensures they are correctly assigned to the appropriate organisation groups and the correct configuration policies are applied.