diff --git a/changes/17692-enrollment-state-3.md b/changes/17692-enrollment-state-3.md
new file mode 100644
index 000000000000..5703a31fd20e
--- /dev/null
+++ b/changes/17692-enrollment-state-3.md
@@ -0,0 +1 @@
+- Fix a bug where valid MDM enrollments would show up as unmanaged (EnrollmentState 3)
diff --git a/server/service/osquery_utils/queries.go b/server/service/osquery_utils/queries.go
index 3baf7bb09c9a..70559724bd9b 100644
--- a/server/service/osquery_utils/queries.go
+++ b/server/service/osquery_utils/queries.go
@@ -496,7 +496,7 @@ var extraDetailQueries = map[string]DetailQuery{
 		    -- coalesce to 'unknown' and keep that state in the list
 		    -- in order to account for hosts that might not have this
 		    -- key, and servers
-                    WHERE COALESCE(e.state, '0') IN ('0', '1', '2')
+                    WHERE COALESCE(e.state, '0') IN ('0', '1', '2', '3')
                     LIMIT 1;
 		`,
 		DirectIngestFunc: directIngestMDMWindows,